Slashdot Mirror


Microsoft's Free AV App May Be a Non-Starter

CWmike writes "Microsoft is preparing to launch a public beta of Morro, the free anti-malware it announced last November, according to reports. Morro will use the same scanning engine as Windows Live OneCare, the software that the free software will replace and Microsoft's first consumer-grade antivirus package. OneCare is to get the boot as of June 30 (along with finance app Microsoft Money). John Pescatore, an analyst at Gartner, has questioned whether users would step up to Morro even if it was free. 'Consumers are hesitant to pay for a Microsoft security product that will remove problems in other Microsoft products,' he said. 'Think of it this way. What if you smelled a rotten egg odor in your water and the water company said, "Sure, we can remove that, but it will cost you $50." Would you buy it?' Not surprisingly, competitors have dismissed Morro's threat to their business. 'We like our chances,' Todd Gebhart, vice president in charge of McAfee's consumer line, said when it was announced OneCare was a goner. 'Consumers have already rejected OneCare,' added Rowan Trollope, senior vice president of consumer software at Symantec. 'Making that same substandard security technology free won't change that equation.'"

251 comments

  1. As long as.. by NervousNerd · · Score: 5, Insightful

    As long as it doesn't suck as much as Norton (slow, hard to remove), I'll take a look at it. Right now I'm running ClamWin, and I'm looking for a better (free) anti-virus.

    1. Re:As long as.. by houstonbofh · · Score: 1

      Have to say I am with you on this one. And there is only one free product you can put on business PCs, so the only competitor is ClamWin in that (not small) market.

    2. Re:As long as.. by Chrisq · · Score: 1

      AVG Free Edition is pretty good too.

    3. Re:As long as.. by samriel · · Score: 1

      Yes, but every few months they'll release a new version and the old version refuses to update. At least, that's how it always worked for me.

      /mac mini with iAntivirus nowadays

    4. Re:As long as.. by ShieldW0lf · · Score: 4, Funny

      Motive: They're trying to seize control of their botnet back from the Chinese.

      --
      -1 Uncomfortable Truth
    5. Re:As long as.. by PhracturedBlue · · Score: 5, Interesting

      According to a-v comparatives:
      http://www.av-comparatives.org/comparativesreviews/corporate-reviews

      Microsoft's AV software is very good. It has low false-positives and generally scored quite well. If the same capability is free, I don't see a reason not to recommend its use. I certainly don't work for a-v comparatives, but they were around before Microsoft was in AV business, and their top rated software changes pretty freqeuntly. I'd call them reasonably unbiased, but judge for yourself.

    6. Re:As long as.. by Zxarr · · Score: 5, Informative

      Avast Antivirus is pretty good too. It's free, but you need to register yearly.

    7. Re:As long as.. by Anonymous Coward · · Score: 0

      Not free for business.

    8. Re:As long as.. by gid · · Score: 1

      One thing I appreciate about avast is it not treating you like an idiot. It allows you to switch off the antivirus protection fairly easily from the systray.

      I'd recommend it, although I have gotten a few false positives from it, but other than that...

    9. Re:As long as.. by Anonymous Coward · · Score: 0

      I think you're not supposed to install that on business PCs.

    10. Re:As long as.. by GordonCopestake · · Score: 2, Funny

      "Microsoft's AV software is very good. It has low positives and generally scored quite well."

      There fixed that for you

    11. Re:As long as.. by Opportunist · · Score: 4, Funny

      Well, to give Norton some credit, they've been working on their removal procedure and it's now easier to remove.

      So (since my boss once said "if you can't say anything good about your competitor, say nothing"), I can now not only say "Norton has a good looking box", I can also say "It's fairly easy to remove it".

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    12. Re:As long as.. by JSmooth · · Score: 1

      go look at norton 360 v3. It installed in less than 90 seconds and has almost 0 impact on system performance on my father-in-laws very messy XP workstation with 512MB of RAM (about 4 year old pc)

      Norton has come ALONG way in the last 2 years.

      disclaimer: I no longer work for Symantec but I do still own some of their stock

    13. Re:As long as.. by Opportunist · · Score: 0, Redundant

      They still suck at proactive detection and detection of variants (i.e. the critical new version of malware that might hit before you update your scanner). It tells me that they're probably working with CRC checks for known malware packages instead of a behavioristic approach (as many high profile AV suits do today).

      That wouldn't be SO bad if their response time to new threats wasn't likewise abysmal.

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    14. Re:As long as.. by AmiMoJo · · Score: 1

      The results from AV Comparatives are not the whole story. Livecare tends to take a while to get updated with the latest viruses. It's heuristics are not that good either, and it often fails to remove malware it finds.

      Norton is actually one of the best of detection rates, but again suffers from not being able to remove a lot of stuff. It used to be dog slow, and to be fair the latest version isn't exactly quick but it's a vast improvement. It looks like they re-wrote the interface from scratch.

      On the free side, AVG is the best. Avast is okay too. AntiVir's detection rates are not quite as good as AVG's, but it does have the advantage of being capable of running in an "on-demand" only mode (i.e. no realtime scanning, no background tasks etc, just loads when you right click scan things).

      Get Spybot too.

      --
      const int one = 65536; (Silvermoon, Texture.cs)
      SJW, n: "Someone I don't like, and by the way I'm a fuckwit" - AC
    15. Re:As long as.. by Anonymous Coward · · Score: 0

      its actually every 3 months that it requires you input your email address, some comments to the developer, and bingo, new key in your inbox, but Avast is one of the few fully certified and independently tested ICSA certified antivirus programs available for free. I use and suggest Avast to anyone I meet along the way. Might I add i have never gotten a virus while using avast in advanced heuristic mode.

    16. Re:As long as.. by SatanicPuppy · · Score: 1

      I assume you mean, "Remove it from the box."

      If it is now possible to remove Norton without reinstalling the OS, then that's a big improvement. Regardless, I'm not a fan. It still hogs cycles at weird intervals. If I haven't downloaded anything, and I'm not running a scan, then W.T.F is it doing?

      --
      ad logicam Claiming a proposition is false because it was presented as the conclusion of a fallacious argument.
    17. Re:As long as.. by vux984 · · Score: 1

      Have you looked into what your ISP might offer?

      Around here Shaw gives all subscribers "Shaw Secure" for free which uses the F-Secure engine. I highly recommend it to people around here on Shaw -- its decent software, with decent support, no ads or nagware component, and its already bundled with your internet service.

      Telus also offers an antivirus package with their high speed ADSL. I have less experience with it, and don't know what engine it uses, but you can use it for free with up to 5 PCs, and again tech support is relatively good.

      I used to recommend Avast and AVG, but the nagware direction the free versions have taken have put me off.

      Roadrunner seems has a deal with Computer Associates for their EZ Armor antivirus stuff, free to all high speed subscribers.

      Verizon for example doesn't have anything free... but $61/year will get you a suite from them for 3 PCs, which isn't that bad. ($1.70/month/pc) assuming you have 3.

      So even if you /. users out there don't want this stuff yourself, you might want to consider it as an option to recommend to your less technical friends. I'd rather my Uncle run Shaw Secure than AVG Free because its just simpler for both of us. He has a number he can call -other than mine- when he has a question about it.

    18. Re:As long as.. by FatdogHaiku · · Score: 1

      Yes, but every few months they'll release a new version and the old version refuses to update. At least, that's how it always worked for me.

      I agree. Also, each new version seems to be slower, bigger, and more naggy about purchasing an upgrade. A couple weeks ago I switched to Avast4 free edition. I had used it back in Win98 days and it seems to be doing a good job with less system overhead.

      --
      You have the right to remain sentient. If you give up the right to remain sentient, you will be elected to public office
    19. Re:As long as.. by Opportunist · · Score: 2, Funny

      That's something that puzzles the whole industry. But not to a degree that we care too much about it.

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    20. Re:As long as.. by Anonymous Coward · · Score: 0

      I am with you there on the Norton 360 product. But I must say, Norton Internet Security product has been really good. It also got some good reviews from cnet and pcmag. Symantec seems to have done a good job recently. I run it on my laptop and desktop computer and its pretty good so far.

      http://reviews.cnet.com/internet-security-and-firewall/norton-internet-security-2009/4505-3667_7-33246586.html
      http://www.pcmag.com/article2/0,2817,2330018,00.asp

    21. Re:As long as.. by Miseph · · Score: 1

      Avast! only nagged me once in the last 12 months, when it wanted me to re-register it tried selling me on the pay versions... but other than that, it just quietly works away.

      --
      Try not to take me more seriously than I take myself.
    22. Re:As long as.. by vux984 · · Score: 1

      Avast! only nagged me once in the last 12 months, when it wanted me to re-register it tried selling me on the pay versions... but other than that, it just quietly works away.

      Sorry I meant Avira Antivir, with it's daily nag screen, not Avast.

    23. Re:As long as.. by maxume · · Score: 1

      For AVG, 8.5 has been a much smoother experience than 8.0 was.

      --
      Nerd rage is the funniest rage.
    24. Re:As long as.. by socrplayr813 · · Score: 1

      I'll probably get modded down for this, but the latest versions of Norton aren't slow anymore. I used to be dead set against Norton, but 2009 came with my laptop and it is easily the least intrusive AV I've ever come across. It's never picked up a virus, so I can't comment on detection, but I've never gotten viruses in the past anyway.

      I suggest you use it before regurgitating the old Norton issues.

      http://www.geek.com/articles/chips/review-norton-internet-security-2009-not-ready-2008101/
      http://www.pcmag.com/article2/0,2817,2330018,00.asp
      http://reviews.cnet.com/internet-security-and-firewall/norton-internet-security-2009/4505-3667_7-33246586.html?tag=api&subj=re

      Even Newegg customer reviews are overwhelmingly fives. Yes, I know there aren't a ton of reviews, but it's interesting nonetheless.
      http://www.newegg.com/Product/ProductReview.aspx?Item=N82E16832108387

      I can't comment on Microsoft's offering, but I am a bit skeptical. If it's free, I'll probably try it at some point.

      --
      The confidence of ignorance will always overcome the indecision of knowledge.
    25. Re:As long as.. by Anonymous Coward · · Score: 0

      Weird, Avast demands that I pay for a yearly license.

      Either that or it let in a virus posing as Avast.

      Or maybe Avast is a virus.

      Either way, you've given me alot to think about.

    26. Re:As long as.. by Phroggy · · Score: 1

      The new version of Norton AV is much faster than older versions; they've really worked on cleaning up that problem. As for removing it, if the uninstall fails for some reason, the Symantec Norton Removal Tool (SymNRT) will definitely get rid of it.

      I understand that you're looking for something free (I'm running AVG on my Windows 7 box at home), but for those who don't mind paying a subscription fee, you should definitely download the free 2-week trial. NAV2006 was a horrible steaming pile of crap, but this isn't that. I have no affiliation to Symantec and do NOT recommend any of their other software (360, Internet Security, SystemWorks), but NAV is what I recommend to my clients.

      --
      $x='S24;r)>63/* h@<5+oZ)32"5cz';$me='phroggy'x$];
      $x=~y+ -xz+\0-Tx+;print$_^chop$me for split'',$x;
    27. Re:As long as.. by Mister+Whirly · · Score: 1

      Believe it or not, Symantec Corporate AV running on Vista 64 bit has a really small footprint. I really couldn't believe it at first, because on XP 32 bit it took up a lot of memory, even when doing nothing. On Vista 64 bit, the resident apps are all mostly under 5 MB of memory. I was shocked as I had just become resigned to the fact that it usually had much more bloat. That said I would still never use anything but the corporate version - it seems to do better than the home versions with memory/CPU management.

      --
      "But this one goes to 11!"
    28. Re:As long as.. by NervousNerd · · Score: 1

      I believe Comcast has a McAfee based anti-virus application.

    29. Re:As long as.. by Anonymous Coward · · Score: 0

      Is it actually much faster, or is it just taking up one core of your dual core processor? :)

    30. Re:As long as.. by Phroggy · · Score: 1

      Is it actually much faster, or is it just taking up one core of your dual core processor? :)

      Heh, I imagine that's part of it too, but they've set it up to only scan when the system is idle, and if memory serves, you can configure it to never scan while certain applications are running. It shows a little graph of your CPU usage so you can more easily see what's going on. The scanning itself probably isn't actually faster (on the same hardware), but they've rearranged the software to make it less intrusive, which is what people hated.

      --
      $x='S24;r)>63/* h@<5+oZ)32"5cz';$me='phroggy'x$];
      $x=~y+ -xz+\0-Tx+;print$_^chop$me for split'',$x;
    31. Re:As long as.. by Spike15 · · Score: 1

      I'd recommend it, although I have gotten a few false positives from it, but other than that...

      I not only recommend it but put it on every new PC that I setup. So far none of them have been infected.

      The thing that I appreciate the most about avast is how powerful its on-access protection is. I haven't used another virus scanner that was as good at catching threats as (but still before) they were going to be executed.

      As for false positives, I have gotten a few, but mostly off of key generators that use algorithms that set off the alarm bells of more than just avast.

      Besides, rather false positives than false negatives, right?

    32. Re:As long as.. by Anonymous Coward · · Score: 0

      If I haven't downloaded anything, and I'm not running a scan, then W.T.F is it doing?

      Garbage collection?

    33. Re:As long as.. by DMUTPeregrine · · Score: 1

      Norton is "easy" to remove. You just have to download the norton removal tool. Of course, that thing should be the default uninstall.

      --
      Not a sentence!
    34. Re:As long as.. by node+3 · · Score: 1

      If by every few months you mean once a year, and by "old version" you mean "two versions (aka two years) back", then yes.

    35. Re:As long as.. by Anonymous Coward · · Score: 0

      I just read that report you linked. They gave Symantec 5 stars out of 5 in performance. That fact alone completely discredits the entire report.

    36. Re:As long as.. by Master+of+Transhuman · · Score: 1

      Agreed. I have small business clients that are too cheap to buy a decent AV, and ClamWin's detection capabilities are way below most of the standard AV products, not to mention the lack on of on-access capability. Comodo AV would be an option but it's detection capabilities are not great either. That leaves Microsoft's new free product. While OneCare's detection abilities suck, maybe they suck "better" than ClamWin and Comodo. Something is better than nothing.

      --
      Richard Steven Hack - This sig is TOO GODDAMN SHORT TO DO ANYTHING USEFUL WITH! MORONS!
    37. Re:As long as.. by BikeHelmet · · Score: 1

      I find the statements in this article quite hilarious, considering how much Symantec and McAfee were crying back when Microsoft first announced OneCare.

      Antitrust! Lawsuit! Unfairness! Well gee, looks like they did okay. Now they're just smug.

    38. Re:As long as.. by Anonymous Coward · · Score: 0

      You probably downloaded the "Professional" version, which you do have to pay for. On www.avast.com, go to the right where it says "Free Software", and download from there.

    39. Re:As long as.. by Anonymous Coward · · Score: 0

      The best free AV is: Avira (http://www.free-av.com/), Panda as lunch is own free antivirus "CloudAntivirus" (http://www.cloudantivirus.com/)... many people don't like Panda, but Panda Security is having lately good results in comparisons.... much good that ClamWin...

    40. Re:As long as.. by Phoghat · · Score: 1
      What you're looking for is

      http://www.free-av.com/

      Easy , free

      --
      Think of how stupid the average person is, and realize half of them are stupider than that.
    41. Re:As long as.. by houstonbofh · · Score: 1

      Avast Antivirus is pretty good too. It's free, but you need to register yearly.

      "Free software for home use only"

      So my original post still stands. Clamwin is the only free virus software I know you can use on commercial PCs.

    42. Re:As long as.. by Tubal-Cain · · Score: 1

      Clamwin is the only free virus software I know you can use on commercial PCs.

      I'm sure you don't need permission from the authors to install Conficker.

    43. Re:As long as.. by houstonbofh · · Score: 1

      Have you read the EULA? It is a nightmare! :)

  2. Am I missing something? by Raindance · · Score: 5, Interesting

    I'm not the biggest Microsoft fan out there, but this summary feels a little over the top.

    'We like our chances,' Todd Gebhart, vice president in charge of McAfee's consumer line, said when it was announced OneCare was a goner. 'Consumers have already rejected OneCare,' added Rowan Trollope, senior vice president of consumer software at Symantec. 'Making that same substandard security technology free won't change that equation.'"

    How can you say that with a straight face? The difference between for-pay and free is huge. And rebranding can make a big difference-- look at the recent success of Bing, for instance.

    Personally, I think people are aching for alternatives to the current big players like McAfee. I'm reminded of this recent slashdot story-

    "'Security firms Symantec and McAfee have both agreed to pay $375,000 to US authorities after they automatically renewed consumers' subscriptions without their consent.' The two companies were reported to the New York Attorney General after people complained that their credit cards were being charged without their consent. The investigators found that information about the auto-renewals was hidden at the bottom of long web pages or buried in the EULA."

    I think something that's free and easy to use can compete very well against this sort of customer abuse.

    p.s. anyone else find the quotation by John Pescatore completely unintelligible? Either he's very confused with his analogies or was misquoted.

    1. Re:Am I missing something? by drinkypoo · · Score: 2, Interesting

      Personally, I think people are aching for alternatives to the current big players like McAfee.

      I'm aching for alternatives to bloatware like AVG, actually.

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
    2. Re:Am I missing something? by houstonbofh · · Score: 4, Interesting

      It gets confusing when Norton and McAffe are the evil entrenched duopoly, and Microsoft is the plucky young upstart. Reminds me of the early 80s.

    3. Re:Am I missing something? by Spazztastic · · Score: 1

      Personally, I think people are aching for alternatives to the current big players like McAfee.

      I'm aching for alternatives to bloatware like AVG, actually.

      Avira.

      This, of course, is for home and personal use.

      --
      Posts not to be taken literally. Almost everything is sarcasm.
    4. Re:Am I missing something? by homes32 · · Score: 1

      And rebranding can make a big difference-- look at the recent success of Bing, for instance.

      easy there big boy! recent success? give them a few months until the "new" wears off before declaring it a success. Its just like the soda companies releasing a new flavor, Surge, Clear Pepsi, OK, Mt. Dew Livewire, [insert freaky ass flavor here], etc... were all a big hit for about 3 months while everyone had to try it. now where are they at?

    5. Re:Am I missing something? by drinkypoo · · Score: 1

      Thanks, I'm giving it a try. I've been using Vista for a few days and I'm getting nervous (the jokes practically write themselves) and think I should have some AV.

      Is it worth getting more spam in my gmail spam folder to do some trialware crap and get the premium version? I already have over 10,000 messages in there, what's another thousand or so?

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
    6. Re:Am I missing something? by aj50 · · Score: 1

      And will pop up a reminder every two days to inform you that for only 19.95/year you could be using AntiVira Premium.

      I got so fed up with it that I'm probably going to end up paying for NOD32

      --
      I wish to remain anomalous
    7. Re:Am I missing something? by Deathlizard · · Score: 1

      I second this.

      Blows AVG out of the water, and consistently scores high on virus software comparasions. Latest version seems to cause some performance issues on lower spec machines, but still scans like a champ.

    8. Re:Am I missing something? by skornenicholas · · Score: 1

      Well, the true analogy of a water company handing out a free water filter to all of their customers due to their acknowledged water contamination issue probably wouldn't have gotten the "Micro$soft Sucks!" crowd riled up enough. Honesty, we could all use a little more of it. Oh, and to those of you suggesting Microsoft should just "Fix Windows," they would if ALL third party vendors would work with the Evil Empire and submit all code for review 12 months before releasing it for bug testing AND if virus writers would stop writing new exploits every five minutes, getting the point here sparky? ::Not a fanboy, converted his entire local office to open source and writing this on Fedora::

    9. Re:Am I missing something? by Spazztastic · · Score: 1

      Is it worth getting more spam in my gmail spam folder to do some trialware crap and get the premium version? I already have over 10,000 messages in there, what's another thousand or so?

      Im using the trial version of the premium suite on my new PC (procrastinating on buying it) and I have only gotten a handful of e-mails, only reminding me to purchase it or that my trial is expiring soon. Not too bad, IMO.

      --
      Posts not to be taken literally. Almost everything is sarcasm.
    10. Re:Am I missing something? by lorenlal · · Score: 1

      How can you say that with a straight face? The difference between for-pay and free is huge. And rebranding can make a big difference-- look at the recent success of Bing, for instance.

      Not going to argue with Bing... but in the business market for-pay and free are not always that huge a difference. It depends on the buyer, and what the "for-pay" gets you. There are plenty of companies that absolutely require some sort of support for a given product. In addition to that, there are minimum requirements that the software must meet just to be considered. By the looks of this move, since Morro is going to use an engine from a product that absolutely flopped and died, then chances are Morro will follow. If they announced that Morro was rewritten from the ground up, then it'd be a different story.

      Besides, for a company to consider changing the Anti-malware vendor, it would certainly be in their best interest to consider every option possible right? We all know our gripes about Symantec and McAfee, but there are plenty of options out there that are quite good. So, it's up to us (IT personnel) to do fair evaluations for our businesses and to identify the needs we have. I'd be more than happy to evaluate Morro... But it being free doesn't give it much credit to me. I want something that works, works well (yes, there's a difference), doesn't bog down the host, has support, and can be managed. Once the products are identified that fit those criteria, then price becomes a factor.

      If Morro can't deliver in the first round (like OneCare), then it'll die too.

    11. Re:Am I missing something? by Spazztastic · · Score: 1

      And will pop up a reminder every two days to inform you that for only 19.95/year you could be using AntiVira Premium.

      It's non-intrusive though. You click OK, and it goes away. No more for two days. It's preferable to the alternatives that are out there.

      I ended up buying a 3 year license for $129.99(US).

      --
      Posts not to be taken literally. Almost everything is sarcasm.
    12. Re:Am I missing something? by emurphy42 · · Score: 1

      p.s. anyone else find the quotation by John Pescatore completely unintelligible? Either he's very confused with his analogies or was misquoted.

      This page places it in more coherent context:

      After Microsoft's announcement last year, John Pescatore, a Gartner analyst, wasn't betting that consumers users would use Morro even if it was free, due to the fact that you would be installing one MS product to fix the security issues in another MS product (the OS). And that also, he indicated, was on reason why OneCare wasn't doing so well, either.

      "Consumers are hesitant to pay for a Microsoft security product that will remove problems in other Microsoft products. Think of it this way. What if you smelled a rotten egg odor in your water and the water company said, 'Sure, we can remove that, but it will cost you $50.' Would you buy it?"

    13. Re:Am I missing something? by perryizgr8 · · Score: 1

      i thought morro was supposed to be free?

      --
      Wealth is the gift that keeps on giving.
    14. Re:Am I missing something? by emurphy42 · · Score: 1
      And another one:

      However, John Pescatore, an analyst at Gartner Inc., questioned whether users would step up to Microsoft's free software. Noting that Windows Live OneCare "hasn't made a dent" in market share, he argued that one reason consumers have steered clear of Microsoft's security software was distrust.

      "Consumers are hesitant to pay for a Microsoft security product that will remove problems in other Microsoft products," he said. "Think of it this way. What if you smelled a rotten egg odor in your water, and the water company said, 'Sure, we can remove that, but it will cost you $50.' Would you buy it?"

    15. Re:Am I missing something? by morgan_greywolf · · Score: 1

      What's wrong with Clamwin?

    16. Re:Am I missing something? by jayme0227 · · Score: 1

      I, for one, have never paid for an anti-virus. I have used a wide variety of pre-installed programs, and when their free grace period runs out, I download AVG or Avira or a myriad of others that have since come and gone.

      Also, I think it would be foolish for anyone at McAfee or Symantec to dismiss the weight that the Microsoft name carries behind it. To the mass consumer, MS is a known commodity and is known for putting out relatively good (if not overpriced) products. They assume that if MS puts their name on something, it can't be complete crap because the company wouldn't risk taking a hit to their reputation. The mass consumer (read: non-nerd) would be more likely to try out a free security program from Microsoft than try out something free from a relatively unknown company like AVG.

      --
      But then I realized the cable was blue, so I only gave it one star. I hate blue.
    17. Re:Am I missing something? by Deathlizard · · Score: 4, Insightful

      what bothers me most about this article is this line

      'Consumers are hesitant to pay for a Microsoft security product that will remove problems in other Microsoft products,'

      At this point, most malware doesn't hack Windows, it hacks your brain. It tricks you into executing it. The only vector that is even being used extensively anymore is Office, Acrobat, and Flash, MS has been phasing out older formats and patching up the holes and Adobe is finally waking up and doing something about their security issues. even in those programs, most of the time a Trojan file is involved.

      On top of that, the most recent malware doesn't even need administrative privlages. It simply installs in your user account directory and starts up when you login. I see absoletly no reason why this method of execution wouldn't work in any other OS, Be it Linux, OSX, or BSD regardless of security settings.

    18. Re:Am I missing something? by aj50 · · Score: 4, Insightful

      A huge advert window opens, minimising the fullscreen game that I'm playing to tell me to buy their product.

      This must be some use of the word "non-intrusive" which I am not aware of.

      Admittedly, I didn't have any problems with it as an anti-virus package, it was much better than bloated "full protection" software packages from Symantec and McAfee but I feel it's cheating somewhat to advertise your product as "free anti-virus" and then use it as a platform to advertise the pay-for versions which just have more features that I don't want.

      --
      I wish to remain anomalous
    19. Re:Am I missing something? by Corporate+Troll · · Score: 2, Insightful

      It's non-intrusive though. You click OK, and it goes away. No more for two days. It's preferable to the alternatives that are out there.

      and then

      I ended up buying a 3 year license for $129.99(US).

      So, the system works? You bought from them, that's the whole point...

    20. Re:Am I missing something? by perryizgr8 · · Score: 1

      bing has been surprisingly good so far. you can compare results on blindsearch

      --
      Wealth is the gift that keeps on giving.
    21. Re:Am I missing something? by Kamokazi · · Score: 2, Interesting
      I agree. It's one thing to call out Microsoft for their many mistakes, but it's comepletely different to be so rabidly anti-MS that you start making yourself appear stupid. I really thought this statement kind of shows what kind of an idiot this guy is:

      'Consumers are hesitant to pay for a Microsoft security product that will remove problems in other Microsoft products,'

      Most malware is not something that exploits vulnerabilities inherent in the product, they exploit the easiest vulnerability of all: the user. A lot of what AV programs do is protect stupid users from infecting their own PCs. Really, it doesn't remove any problems in other products...the patches and updates available for free do that. It will look for known malware that exploits those vulnerabilities if left unpatched, however.

      --
      As our way of thanking you for your positive contributions to Slashdot, you are eligible to disable Slashdot 2.0.
    22. Re:Am I missing something? by VertigoAce · · Score: 2, Interesting

      Morro (and OneCare) are for unmanaged computers (home users, perhaps small companies). Forefront Client Security is the anti-malware software intended for business use. Both will use the same anti-malware engine, but FCS has all of the manageability and reporting that you would expect in an enterprise.

      I don't really see Morro as an attempt to compete in the home anti-virus market (in other words, Morro is not intended to take sales away from any of the other vendors). The real goal is to try to have anti-virus on all PCs worldwide. There are a number of large markets outside the US where few PCs have anti-virus software. And it wouldn't surprise me if the US market has a fair number of PCs where the trial/subscription for whatever the OEM installed has expired.

    23. Re:Am I missing something? by adisakp · · Score: 1

      How can you say that with a straight face? The difference between for-pay and free is huge. And rebranding can make a big difference-- look at the recent success of Bing, for instance.

      You forgot to mention bundling. If MS includes Morro by default with Windows 7, then they're instantly going to have the largest AV/AntiMalware share on Windows 7. Just like IE and the browser war. Anyone who wants to compete with free and bundled has to offer a similar product for free -- don't believe me? The last time anyone actually paid for a browser on Windows was probably about 6 months after IE came out for free.

    24. Re:Am I missing something? by tompeach · · Score: 1

      Interesting apart from blindsearch doesn't give me the localised (broken) search results Bing gives me.

    25. Re:Am I missing something? by jbeale53 · · Score: 1

      Mountain Dew Livewire rocked. I know that it was really just a sunkist, but it had that over-the-top sugar taste and caffeine of Mountain Dew. I found it in Virginia a while back, but that's a 70 mile drive just for a soft drink. Now, the grape Dew? I forgot what it was called, but it was ass.

    26. Re:Am I missing something? by NatasRevol · · Score: 1

      So you're blaming third party vendors for exploits in Windows???

      It's not Microsoft's fault all on their own???

      --
      There are two types of people in the world: Those who crave closure
    27. Re:Am I missing something? by jwslash · · Score: 1

      Regarding Pescatore's water analogy: I think he's saying that it is bad business for a company to peddle a solution to their own defective product. Why would you trust the solution? Instead of creating AV software, shouldn't they be trying to get rid of the problem? Let us not forget: Windows is not insecure because viruses exist, it is insecure because of a fundamentally substandard software architecture.

    28. Re:Am I missing something? by Opportunist · · Score: 1

      There are good reasons not to use a MS antivirus suit. First and foremost the "same vendor" reason: Why should I trust a vendor to plug a security hole he himself opened up, and by applying an additional layer of defense instead of plugging the hole in the first place?

      Would you trust your plumber if he told you "I can't fix this leaking pipe, but here's a bucket."

      Now, I wouldn't go to Norton or McAfee either for protection, but there are alternatives, and by far better alternatives. For private and corporate users. "Free and easy to use" isn't the end-all when it comes to security.

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    29. Re:Am I missing something? by Bert64 · · Score: 1

      Use an anonymous mail service to sign up...

      http://www.spamdecoy.net/
      http://www.dodgit.com/

      etc...

      --
      http://spamdecoy.net - free throwaway anonymous email - avoid spam!
    30. Re:Am I missing something? by Opportunist · · Score: 1

      Avira free edition is not trialware. It's a limited version of their pay-for AV suit (iirc it doesn't come with proactive mail protection), it's a normal AV on-demand and on-access scanner. The drawback to their pay-for version is that license expires after a year and you have to download a new version and reinstall it, and you get a huge splash screen once a day during updates telling you how awesome the pay-for version is.

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    31. Re:Am I missing something? by dtfinch · · Score: 2, Informative

      For one, it creates lots of temporary files for every file it scans, trying to extract them like an archive whether they really are or not. That's why it scans so slowly, and will thrash your hard drive even if you're scanning files elsewhere, like over the network.

    32. Re:Am I missing something? by Opportunist · · Score: 1

      Do what I did, schedule the update for 3am and you just have to close a window when you come home after school/work.

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    33. Re:Am I missing something? by Anonymous Coward · · Score: 0

      written in python, slow as fuck, lacking features, lots of false positives.

    34. Re:Am I missing something? by Psiren · · Score: 1

      Personally, I think people are aching for alternatives to the current big players like McAfee.

      Damn straight. Our students use McAfee because our parent institution has a site license. Frankly, it's the biggest pile of crap going. It takes ages to scan, uses huge amounts of resources, and then proceeds to do fuck all about most of the infections. Those that it does claim to remove are actually still there afterwards. Frankly, I wouldn't install McAfee if they were paying me. Given the choice between that and Microsoft, I know which way I'd go.

    35. Re:Am I missing something? by Blakey+Rat · · Score: 3, Informative

      And rebranding can make a big difference-- look at the recent success of Bing, for instance.

      Bing is, technically, far superior to Live Search. It's not just a re-branding.

      (With one exception: people raving about Bing's image search UI obviously never used Live Image Search, which is nearly identical UI-wise. Bing still returns better, more relevant, results though.)

    36. Re:Am I missing something? by Bert64 · · Score: 1

      AV *kinda* works because not everyone has it, and there are lots of different ones out there...
      If you end up with a single default AV everywhere, then it just becomes another function of windows that malware authors will learn to work around.

      Windows has steadily been gaining features designed to make life more difficult for malware authors, and yet new malware comes out all the time with new methods to work around such features.

      --
      http://spamdecoy.net - free throwaway anonymous email - avoid spam!
    37. Re:Am I missing something? by Anonymous Coward · · Score: 0

      You forgot to mention bundling. If MS includes Morro by default with Windows 7, then

      They're not bundling it with Windows.

    38. Re:Am I missing something? by CastrTroy · · Score: 1

      Windows is an operating system. It's supposed to run whatever code the user tells it to run. If the user tells it to delete all system files, or send out 50,000 emails, it should do that. Once it stops doing exactly what the user instructs it to do, and tries to stop you from doing stuff because it thinks you shouldn't, it becomes more obtrusive I think that MS should fix problems with their own applications that cause code to get run without the user knowing it, but there's a lot of viruses that come from people downloading and running programs out of their own free will, without any open ports or buffer overflow trickery. Most viruses and malware are spread through using social engineering to get the user to willingly run the application, and not by exploiting some bug in the computer code itself.

      --

      Anthropic principle: We see the universe the way it is because if it were different we would not be here to see it.
    39. Re:Am I missing something? by StellarFury · · Score: 1

      Before we get too caught up in the traditional WINDOWS SUX MAC SUX shouting match, let us also not forget that their market share means malware writers code primarily to attack Windows machines. Seriously, how do you "get rid" of the malware problem in an OS? There are always exploits, even in the most airtight code - programmers are not machines, and they can't catch everything.

      Also, security updates exist. They may suck, they may be too little too late, but you can't honestly say that Microsoft makes no effort whatsoever to make their OS more secure.

      I still say Pescatore's analogy is idiotic because it presumes monopoly. Really, this is what's going on: "You have a rotten-egg smell in your water. The water company says they'll fix it for free, but an outside contractor says they'll fix it for $50. Do you trust the water company, who put the smell there in the first place, or trust the outside contractor?" It's a very different question.

    40. Re:Am I missing something? by RobDude · · Score: 1

      There is a difference between a software vulnerability and malware/viruses.

      Even in a perfect OS, where there are no software vulnerabilities, you can still have malware and viruses. They'd just exploit human stupidity and not software flaws.

    41. Re:Am I missing something? by Kamokazi · · Score: 1

      This is what I get for not reading the children posts before replying. The guy above me just said almost the exact same thing.

      --
      As our way of thanking you for your positive contributions to Slashdot, you are eligible to disable Slashdot 2.0.
    42. Re:Am I missing something? by NatasRevol · · Score: 1

      I won't argue with anything you said except "Most..."
      There are lots of viruses, malware etc that you can get from so-called drive-by installs. Open ports are another way that is still infecting lots of machines

      --
      There are two types of people in the world: Those who crave closure
    43. Re:Am I missing something? by Anonymous Coward · · Score: 0

      In what universe is Bing/Kumo/Live!/MSN/.Net Search successful? It's in the same place it's always been...

    44. Re:Am I missing something? by hidannik · · Score: 1

      Avast. I don't know about how it compares to AVG, but compared to Norton, McAfee and the like it's far less of a resource hog. Hans

    45. Re:Am I missing something? by DragonWriter · · Score: 1

      It's non-intrusive though. You click OK, and it goes away. No more for two days. It's preferable to the alternatives that are out there.

      How is an advertisement popping up every two days preferable to, e.g., what Avast! Home does, which is give free license keys that are good for a year, and only prompting you for an upgrade when they get ready to expire (you can, of course, choose instead to renew with a new free key, as well.)

    46. Re:Am I missing something? by edivad · · Score: 1

      And rebranding can make a big difference-- look at the recent success of Bing, for instance.

      easy there big boy! recent success? give them a few months until the "new" wears off before declaring it a success. Its just like the soda companies releasing a new flavor, Surge, Clear Pepsi, OK, Mt. Dew Livewire, [insert freaky ass flavor here], etc... were all a big hit for about 3 months while everyone had to try it. now where are they at?

      Yes, yes, Bing has been a BIG success man! Come on, and join the MS funboys party, they serve the coolaid at the entrance!
      And this Morro thing, is going to be even bigger than Bing. Based on a technology that has already been rejected by the market, the success will be certain.
      I can just picture the meeting:

      A: What do we do with this noOneCare? Nobody is buying it, and it costs us money. We fire everyone?
      B: Why is it?
      A: The technology suck, and people stopped buying into the Mafia Approach (sell fear and protection) long time ago.
      B: Let's try to give it for free for one year, then we fire everyone.

      If you would have asked me, in 1996 or so, that MS would have become so uncool that no new software they try to push would fail, and that they'll be actually forced to give stuff for free, I certainly wouldn't have believed you.
      Oh well, here we are ...

    47. Re:Am I missing something? by Logic+Worshipper · · Score: 1

      Premium version is so worth it. Avira is an amazing AV.

    48. Re:Am I missing something? by Logic+Worshipper · · Score: 1

      Sucky real time protection, awful detection rate.

      Avira Personal, AVG Free, and Advast. are all way better and also free.

    49. Re:Am I missing something? by Logic+Worshipper · · Score: 1

      Nod32 is nice.

    50. Re:Am I missing something? by Logic+Worshipper · · Score: 1

      The software is better. The detection rate is better, it uses less system resources, and it has a better interface.

    51. Re:Am I missing something? by JasterBobaMereel · · Score: 1

      Because in most other operating systems you do not have enough priviledges to be able to do enough to spread the malwear or do enable it to do anything useful

      On Windows it is getting harder for malwear to install itself but since most people still run XP/IE/Outlook they also mostly run as a user who can be tricked into doing what the malwear considers useful

      The biggest advantage Vista/Win 7 has is that it discourages (finally) you from running as Admin , but it is still a monoculture and so the malwear can exploit the bugs in the programs it can easily assume you are running ....

      --
      Puteulanus fenestra mortis
    52. Re:Am I missing something? by Anonymous Coward · · Score: 0

      And will pop up a reminder every two days to inform you that for only 19.95/year you could be using AntiVira Premium.
      I got so fed up with it that I'm probably going to end up paying for NOD32

      google is your friend.
      http://www.google.com/search?q=avira+nag+screen

    53. Re:Am I missing something? by Anonymous Coward · · Score: 0

      Here's how to remove the nags:
      http://www.tipsfor.us/2007/08/15/make-avira-antivir-free-edition-more-usable/

    54. Re:Am I missing something? by lorenlal · · Score: 1

      Thank you for explaining that to me. I read the article, and I made a few assumptions (that this would be a new edition for their enterprise product too).

      It doesn't add up to me that Microsoft would try to compete in a market for free AV to begin with. Plus, with these OEMs that bundle their own AV, how are these users going to like getting one built into the OS too? Or that they'd have to find some way to enable it or download it later too? Pushing out a consumer AV solution, that apparently hasn't been well received, doesn't really strike me as a good use of resources.

    55. Re:Am I missing something? by socrplayr813 · · Score: 1

      Exactly. If I come across a GOOD antivirus program that I don't have to pay for, I'll be sticking with that for a good while.

      $70+ for an antivirus program on my $2xx+ Windows partition just so I can play games? It's a tad ridiculous...

      --
      The confidence of ignorance will always overcome the indecision of knowledge.
    56. Re:Am I missing something? by Anonymous Coward · · Score: 0

      I tried out Avira during AVG's last "release a new version and refuse to update the old one" cycle. By that time, Avira released version 9 of their system. Even with the avnotify disabled to remove the big misfeature of the product, I wound up switching back to AVG within a week. First, my computer was even SLOWER using Avira compared to AVG, and I have a current computer (Core 2 Duo @3.0GHz, 2GB of RAM). What really sealed it was that scans initiated by the shell extension kept crapping out, and of course since the AV is a kernel-space program Task Manager refused to kill it. I got fed up after the third time it crashed, so I searched to see if anyone else was having this problem, and apparently it was a bug that crept into a rushed-to-market version 9. Sorry, but if you release a so-called "stable" version that breaks such a basic component of your product that should have been caught in alpha stages, you just lost me. As I mentioned, bloated as AVG might be at least it doesn't bog down my computer. I can't imagine how bloated Avira must be.

    57. Re:Am I missing something? by Deathlizard · · Score: 1

      Because in most other operating systems you do not have enough priviledges to be able to do enough to spread the malwear or do enable it to do anything useful

      If you can write to a persistant area of a drive that can survive reboots, you can infect it. It may not be sosphicated, but it doesn't have to be to run a botnet, or spam, or trick you into coughing up a credit card, ETC.

      On Windows it is getting harder for malwear to install itself but since most people still run XP/IE/Outlook they also mostly run as a user who can be tricked into doing what the malwear considers useful

      Example. You run Linux as a user. You boot up Thunderbird. You get an e-mail that says you got a e-card from your grandma. You click on the link, Firefox starts up, and the website (after finding out which OS you run from the user agent string) wants you to download and run ecard on you box, you do so. the ecard program writes the payload into a directory called .virus in your profile and edits your .login to run (PROFILE LOCATION)/.virus/virusfile on login. Everytime you login, virusfile stats up, connects to a botnet, and waits for instructions to either DOS, wait for a kernel exploit to Pwn you, spam/spread your contact list, encrypt and ransom your data files, ETC.

      If you beleive that you would never do that. swap the Roles. Grandma will most likely believe everything the mail says, After All, the mail came from you. Also, keep in mind that nowhere in this sceneario is MS ever mentioned, and you could replace the above apps/OS with any multitude of other apps or operating systems and result in the same outcome.

      The biggest advantage Vista/Win 7 has is that it discourages (finally) you from running as Admin , but it is still a monoculture and so the malwear can exploit the bugs in the programs it can easily assume you are running ....

      As much as Vista and 7 are improvements to security, it is not a solution, and changing the OS just makes it a different process to infect. Bugs in software exist, but all bugs do is automate the viral installation process. Virus Inc's have found it much MUCH MUCH EASIER to trick you into running the payload manually and infecting yourself instead of researching, testing, and exploiting bugs.

      There's really only two solutions to this problem...

      1) Blacklist solution - This is where most AV scanners sit. This is more mitigation rather than a solution. Definition based scanners are useless anymore since mose malware today are compiling on the fly and rotating MD5 hashes. Hierustic / HIPS scanning is better but prone to false positive, and give the (Idiot) user a choice rather than a definitive yes or no.

      2) Whitelist solution - Think DRM, Palladium, WGA, Next Generation Secure Computing Base, IPhone Apps, Game Consoles, or whatever evil entity of Software management you can think of. You either have the OS vender sign it or your screwed. This won't fly at all with consumers.

      Since #2 is pure evil, #1 is the best option left. At least at some point the AV scanner may be able to get rid of an infection if the virus can't disable it.

    58. Re:Am I missing something? by lenester · · Score: 1

      AVG is only bloatware if you install the bloat: choose "Custom Installation" and uncheck everything except the base package and it's much cleaner.

      Last time I checked, you have to fully uninstall it and then re-install as custom; they've been upgrading their installer frequently, it's possible that you can now remove the extra packages in-situ, dunno.

    59. Re:Am I missing something? by 0ld_d0g · · Score: 0

      There are lots of viruses, malware etc that you can get from so-called drive-by installs. Open ports are another way that is still infecting lots of machines

      IMO, 'Most' is accurate. Unless you want to include unpatched machines that get haxxored. When it comes to unpatched security vulnerabilities windows isn't special, every OS is vulnerable.

    60. Re:Am I missing something? by theaceoffire · · Score: 1

      Well, I can't speak for all OS's, but I have a theory.

      In Ubuntu (And other OS's that use a repository), Almost all programs are available from a central location, and have been checked and confirmed as safe and working. You also get all updates from that repository, so that removes a lot of vectors for attack.

      Instead of running a random exe off a random site and hoping it does what it says, you can safely add/remove dozens of apps at once, and they add anything they need to work to the download list from a safe and reliable source.

      So, *can* you get a special exe that runs a virus? Yeah, I have no doubt. But since Ubuntu users are trained to install from a pre-approved massive list, it is less likely to happen as often as with a Windows OS.

      Also, a large number of Virus writers are lazy. They copy/steal each others works, they assume that Windows is on the "C:" drive, they assume IE is available. Since most linux OS's don't conform to this, that is one extra layer of security by obscurity. ^_^ We are only vulnerable to patched/new viruses that target Linux, so a lot of the old stuff is harmless to us.

      --
      I steal signatures. This one used to be yours.
    61. Re:Am I missing something? by houstonbofh · · Score: 1

      Do what I did, schedule the update for 3am and you just have to close a window when you come home after school/work.

      But he said it came up while gaming. Wouldn't 10:00 am be better?

  3. You gotta love it by Rosco+P.+Coltrane · · Score: 4, Interesting

    Microsoft, the virtual inventor of buggy bananaware and OS monoculture that enables mass distributable malware gets into the A/V market. Sounds like Typhoid Mary selling antibiotics...

    --
    "A door is what a dog is perpetually on the wrong side of" - Ogden Nash
    1. Re:You gotta love it by L4t3r4lu5 · · Score: 2, Insightful

      Hey, when you have direct access to the source of infection, you're almost guaranteed to produce the best cures...

      Unless you're Microsoft.

      --
      Finally had enough. Come see us over at https://soylentnews.org/
    2. Re:You gotta love it by Rosco+P.+Coltrane · · Score: 1, Troll

      I suppose most Microsoft programmers are fundamentally honest, so they surely don't want to produce bad code. But they do, so they must possess a certain degree of incompetence. Do I trust incompetents to correct their own mistakes? If they could, they wouldn't have made them in the first place.

      As for management, they are known to rush software out the door with critical bugs and huge inefficiencies because they don't care about good software, they care about sales, and when you work for a monopoly, product quality doesn't matter. Do I trust these people to spend time and money developing a free or cheap anti-virus when the crappy software they propose to fix is forced down consumers' throats anyway? of course not.

      --
      "A door is what a dog is perpetually on the wrong side of" - Ogden Nash
    3. Re:You gotta love it by Rosco+P.+Coltrane · · Score: 1

      Getting a virus when receiving an email with a doc file attachment has nothing to do with suckering people into installing software. There are plenty such examples where computer-savvy owners, who aren't suckers, get malware anyway. This would not happen if the OS was not to blame otherwise.

      --
      "A door is what a dog is perpetually on the wrong side of" - Ogden Nash
    4. Re:You gotta love it by Anonymous Coward · · Score: 0

      First they ingore you.

      Then they watch as you abuse your monopoly position to take them out.

      Then you pay the right government officials to get a slap on the wrist.

      Then you win.

    5. Re:You gotta love it by mrsurb · · Score: 1

      There are times when a steep learning curve is an advantage - I have recently set up Ubuntu on my wife's laptop and I doubt that she would be able to work out how to run malware on her system, even if she were suckered into trying.

    6. Re:You gotta love it by mr_mischief · · Score: 1

      What MS possesses for the most part are project managers who ship profitable software. One way to keep your software more profitable is to let your customers do a good portion of your quality control so you can get to market early and fix the biggest problems in a patch later. It shows little pride of workmanship, but it's sound business so long as your product is at least just good enough to sell.

    7. Re:You gotta love it by plague3106 · · Score: 2, Insightful

      I suppose most Microsoft programmers are fundamentally honest, so they surely don't want to produce bad code. But they do, so they must possess a certain degree of incompetence. Do I trust incompetents to correct their own mistakes? If they could, they wouldn't have made them in the first place.

      What cereal box did you get your CS degree from? Making a mistake does not make on incompetent. All complex systems have some flaws.

    8. Re:You gotta love it by plague3106 · · Score: 2, Insightful

      Get off it already. Do you have something more recent than five years ago?

    9. Re:You gotta love it by StellarFury · · Score: 1

      Let me know when you publish your no-patch absolute-secure OS.

    10. Re:You gotta love it by RobDude · · Score: 1

      There are examples of software exploits that allow malware to infect a PC without user interaction. Yes, they exist.

      To date, there have been zero operating systems that have been free of bugs or potential exploits that could allow the unauthorized execution of code. Zero.

      Regardless, the majority of malware infections are not exploiting software vulnerabilities. They are exploiting users. If you create an EXE called 'My secret.exe' and send it out to 10,000 people with the message, 'I've been meaning to say this to you in person, but I just couldn't. I think the video says it all'. A nontrivial number of those people are going to double click and try to run it.

      If it needs administrative privileges to run, the user will grant them.

    11. Re:You gotta love it by Bert64 · · Score: 2, Informative

      Which is where linux has several inherent advantages over windows....

      A trusted package repository - if you can, try to get all your software from the repository, it will be signed by your distro and therefore somewhat trusted, and is much easier to maintain (update) etc... Users are far less likely to be downloading and running random arbitrary binaries.

      Files being executable are based on file permissions rather than the name, a malicious file being delivered by a website can easily control the filename, but it cannot control whether your system gives it execution rights or not, that you have to do yourself creating an extra step in the process.

      Extra to the above, linux does not hide file extensions in the same way windows does by default, on windows icons are stored in the executables themselves, so its possible to create an executable with the same icon as a more innocuous file, eg a jpeg picture... then you can call it "blah.jpg.exe" and windows will hide the .exe part by default, making it look exactly like a jpeg picture in explorer.

      Linux users won't have root privileges by default, so a piece of malware needs to elevate privileges first before it can do serious damage or try to hide itself thoroughly, windows (and shoddy third party apps) has always encouraged users to run as admin, although vista is trying to address this.

      Linux has no concept of autorun, windows will automatically execute files on inserted media by default, some malware takes advantage of this to spread.

      Diversity - there are many versions of linux with various differences between them, even including processor differences (linux/ppc on ps3 or old macs, arm or mips based netbooks etc), meaning that a piece of malware written for ubuntu/x86 may not operate correctly on fedora/x86 and certainly won't run on yellowdog/ppc... for instance the init scripts differ between fedora and ubuntu, so the malware may have difficulty configuring itself to start at boot....

      This isn't a comprehensive list, and it certainly isn't flawless, but it highlights several things that make linux a tougher proposition than windows for malware authors.

      --
      http://spamdecoy.net - free throwaway anonymous email - avoid spam!
    12. Re:You gotta love it by Anonymous Coward · · Score: 0

      I'm confused (read:dumb) over just how Morro will work, but considering past events such as BITS being used as an attack platform or when code red infected the Windows Update site, why should trust be placed in Microsoft's hands anyway?

    13. Re:You gotta love it by IntlHarvester · · Score: 1

      I love when Linux fans come up with this list of textbook advantages, none of which would do anything to impede a serious malware author.

      A trusted package repository

      - Which does nothing to stop users from running Britney.rpm or whatever.

      Files being executable are based on file permissions rather than the name,

      - Very easily bypassed by using a tar file, a .desktop file, a package file, a Mozilla add-on file, etc etc etc. Techniques that are already common in the Windows malware world.

      Linux users won't have root privileges by default

      - Most malware can accomplish it's purpose as a regular user

      Diversity

      - Linux distros come with a crap loads of scripting languages, runtimes, and other abstractions. Besides, simply targeting Ubuntu will likely get you the majority of desktops.

      Linux has no concept of autorun

      - OK, I'll give you that one, but it's not really a widely used method.

      The biggest defense Linux has against malware is the computer nerd sitting between the chair and the keyboard, and the lack of marketshare. Malware authors are in it for the money, and there's little profit in stealing ramen money from a handful of computer science students.

      --
      Business. Numbers. Money. People. Computer World.
    14. Re:You gotta love it by cristjs · · Score: 1

      Does it completely remove Windows, or just quarantine it??

  4. Shouldn't they just fix Windows? by yourassOA · · Score: 0, Troll

    Microsoft make shitty pay for software do you really want to trust their free software?

    1. Re:Shouldn't they just fix Windows? by yourassOA · · Score: 1

      Well someone doesn't want MS to fix windows. Is the moderator in this case one of those assholes who write virus and other nasty bits of code. If it wasn't for MS you would be unemployed.

  5. Missing something? by terbo · · Score: 1

    "Making that same substandard security technology free won't change that equation.'"

    Hmm?

    --
    If you're interested in facts I'll tell you what they are and I'll give you sources - Chomsky on The Big Idea
  6. Bad Analogy by Colonel+Korn · · Score: 4, Insightful

    'Think of it this way. What if you smelled a rotten egg odor in your water and the water company said, "Sure, we can remove that, but it will cost you $50." Would you buy it?'

    This analogy is just dumb. This is a free product. Obviously the analogy would have the water company saying, "Sure, we can remove that for free."

    Not to mention 'Consumers are hesitant to pay for a Microsoft security product that will remove problems in other Microsoft products,' which is a stupid point to make about a free product.

    Furthermore, MS's security "problems" are over a billion installs. As we see every year when they tie Linux as the most secure system in pwn2own, they've got nothing to be upset about on the technical side of things.

    And finally, "added Rowan Trollope, senior vice president of consumer software at Symantec. 'Making that same substandard security technology free won't change that equation'" is pretty funny from a guy representing a company that actually charges for substandard security technology.

    --
    "I zero-index my hamsters" - Willtor (147206)
    1. Re:Bad Analogy by Anonymous Coward · · Score: 0

      It's even worse than that. Most of the "problems" with Windows are a direct result of negligent, ignorant, or stupid end users. Let me try to fix the analogy.

      'Think of it this way. What if you smelled a rotten egg odor in your water and the water company said, "The smell is coming from your disgusting pipes that you haven't done any maintenance on since 1960. But, we can help you remove it for free." Would you buy it?'

    2. Re:Bad Analogy by Anonymous Coward · · Score: 0

      How about:

      "That foul smell is all the rotten eggs all over the street and the house we sold you is all nice and shiny, but there are big gaping holes in the walls and the doors and windows don't shut properly. Perhaps we should have built the house better to begin with? Tell you what, we'll wrap the whole place in duct tape for you at no charge."

    3. Re:Bad Analogy by Anonymous Coward · · Score: 0

      The paid product being referred to was OneCare. What was that about being dumb?

    4. Re:Bad Analogy by NewbieProgrammerMan · · Score: 1

      This analogy is just dumb. This is a free product. Obviously the analogy would have the water company saying, "Sure, we can remove that for free."

      Well, if this free AV product resembles any of the for-pay AV products I've used, I'd have to modify the analogy some more. In that case, the water company would say, "Sure, we'll come install a device in your house to remove the odor. It will only take up a couple hundred square feet of your house, and it has some moving parts that will only get in your way a few times a day while you're trying to go about your daily activities. But, hey, it's free!"

      --
      [b.belong('us') for b in bases if b.owner() == 'you']
    5. Re:Bad Analogy by Opportunist · · Score: 1

      The analogy would hold much more water (no pun intended) if you smelled a rotten egg in your pipes and call a plumber because appearantly the water company isn't able to keep the rotten eggs out of their pipes.

      Now the water company employs their own plumbers. They come to you for free, but then... if they're working for the water company, and they can't keep the rotten eggs out of their pipes, should I trust them with mine?

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    6. Re:Bad Analogy by ryanvm · · Score: 1

      You guys suck at analogies.

    7. Re:Bad Analogy by Bert64 · · Score: 1

      The analogy would be...

      What if you smelled a rotten egg odor in your water and the water company said, "Sure, we can remove that by supplying you with a free filter"....

      Having the free filter to remove the rotten egg odor would still not be preferable to simply not having the rotten egg odor at all.

      --
      http://spamdecoy.net - free throwaway anonymous email - avoid spam!
    8. Re:Bad analogy by DragonWriter · · Score: 1

      Very few malware use the holes in MS software these days.

      Almost all Widows-targetting malware, whether it works by directly compromising a Windows component or through compromising an app running on Windows, exploits fundamental holes in the Windows security model which make it so that compromising any bit of software is equivalent to compromising the user account that runs the software, which is almost always either a regular user account or the system account.

      Of course, this is a fairly common feature of OS structure that's far from unique to Windows, but its not the only way to do things, either.

    9. Re:Bad Analogy by JasterBobaMereel · · Score: 1

      MS's Security problems are that the average user is not running the most secure and locked down system and so is open to all the malware

      pwn2own tests a normally setup but basically secure system, this is *Not* how most people have their systems configured and the majority of people are still running an older version of windows that is less secure, and are running it in a less than ideal security state, behind an inexpertly configured firewall ... so the malware propagates

      Windows is also a monoculture the average user runs IE and Outlook and so is an easy target for anything exploiting the flaws in these products, the average Linux user is likely to be running one of a huge number of different combination of products and so is a much harder target

      --
      Puteulanus fenestra mortis
    10. Re:Bad Analogy by Colonel+Korn · · Score: 1

      The paid product being referred to was OneCare. What was that about being dumb?

      That sure would be dumb, Mr. AC, since the sentence before the quotation was:

      "John Pescatore, an analyst at Gartner, has questioned whether users would step up to Morro even if it was free."

      --
      "I zero-index my hamsters" - Willtor (147206)
    11. Re:Bad analogy by RudeIota · · Score: 1

      "Sure, we can remove that, but it will cost you $50." Would you buy it?'

      Additionally, this isn't correct. Microsoft isn't charging you to remove the sulfur smell -- it's free. If the water company offered to do it for free, I'd say sign me up.

      --
      Fact: Everything I say is fiction.
    12. Re:Bad analogy by recoiledsnake · · Score: 1

      Very few malware use the holes in MS software these days.

      Almost all Widows-targetting malware, whether it works by directly compromising a Windows component or through compromising an app running on Windows, exploits fundamental holes in the Windows security model which make it so that compromising any bit of software is equivalent to compromising the user account that runs the software, which is almost always either a regular user account or the system account.

      Of course, this is a fairly common feature of OS structure that's far from unique to Windows, but its not the only way to do things, either.

      Wrong, most of the malware spread through email, IM, "codec.exe" on shady sites, things masquerading as antiviruses, etc. I.E more of social engineering than actual software exploits.

      --
      This space for rent.
    13. Re:Bad analogy by DragonWriter · · Score: 1

      Wrong, most of the malware spread through email, IM, "codec.exe" on shady sites, things masquerading as antiviruses, etc. I.E more of social engineering than actual software exploits.

      If a downloaded application posing as a codec had to be installed before it was run, and had to request permission for everything it wanted to do to be installed, there would be less chance of "social" exploits working. The all-or-nothing choice inherent in software installation posed when the OS doesn't enforce that kind of security model is what makes gives these kind of tricks the impact they have.

    14. Re:Bad Analogy by rantingkitten · · Score: 1

      As we see every year when they tie Linux as the most secure system in pwn2own, they've got nothing to be upset about on the technical side of things.

      Uhm, last year Vista SP1 fell. Ubuntu got out of the contest unscathed.

      You're talking about an OS which allows the machine to be compromised, not through idiot users or social engineering, but by reading an email or looking at a website in many cases, and where the normal, expected means of installing new applications is to download and run untrusted executables from wherever. They have plenty to worry about on the technical side of things.

      After two decades of exploit after exploit after exploit, it's amazing to me that anyone seriously tries to defend Windows security anymore.

      --
      mirrorshades radio -- darkwave, industrial, futurepop, ebm.
  7. Morro? by Anonymous Coward · · Score: 1, Funny

    Alternative names sugestions: Sucke, Foo, Stupi etc.

    1. Re:Morro? by MadKeithV · · Score: 1

      Wha?
      ..
      ..
      ..
      (4: Profit!! )

  8. Missing some info from the summary by sqlrob · · Score: 5, Interesting

    I'm surprised a quote from this article didn't make it in:

    Morro will work by routing all of a users Internet traffic to a Microsoft datacenter, where the Morro application will process the traffic and identify and block malware in real-time, by examining all of the rerouted traffic

    How many people want all of their traffic explicitly going through Microsoft?

    1. Re:Missing some info from the summary by drooling-dog · · Score: 4, Insightful

      How many people want all of their traffic explicitly going through Microsoft?

      On the other hand, it might be an effective way to protect users from the likes of Linux, Firefox, etc...

    2. Re:Missing some info from the summary by DarthBender · · Score: 2, Insightful

      Wow, I was actually thinking to try it until I saw that. That's huge, and something I want nothing to do with.

    3. Re:Missing some info from the summary by VulpesFoxnik · · Score: 1

      I thought thats was Bing is for. It's a "Decision Engine" after all. It lobotomizes you so a machine can do your thinking.

      --
      RES PUBLICA NON DOMINETUR
    4. Re:Missing some info from the summary by Anonymous Coward · · Score: 1, Insightful

      it sounds like zdnet is very much mistaken. how exactly does microsoft plan to handle all of their users traffic being routed through their server?

    5. Re:Missing some info from the summary by brkello · · Score: 1

      How would that even be possible? There has to be some sort of filtering or the data center would be overwhelmed. Your link is not to an article, but a blog that quotes an article. I don't know who actually wrote it, but this may be a case of someone who doesn't understand tech doing tech writing.

      --
      Support a great indie game: http://www.abaddon360.com
    6. Re:Missing some info from the summary by uassholes · · Score: 1
      The pcworld notice: http://www.pcworld.com/article/166513/will_microsofts_free_antivirus_app_be_worth_the_price.html

      Sounds like an http proxy. Maybe there will be a switch in IE to automatically turn in on.

    7. Re:Missing some info from the summary by cavebison · · Score: 1

      First our Australian government wants a nation-wide internet filter, now the Chinese are doing the same, and soon MS will be the gatekeeper for most of the online world. Is this some kind of competition?

      I was surprised when people began using their real names online, now this.

      Our lives are going open source.

  9. Re:Viruses Aren't a Problem in Linux by sqlrob · · Score: 2, Informative

    Right, there's no way you could have, say, a malicious perl script.

  10. Is that Gartner analyst confused or what? by sribe · · Score: 1

    Seriously, his analogy is pretty far off. Let me try: Think of it this way. What if you smelled a rotten egg odor in your water and the water company said, "Sure, we can remove that, and it's a free service." Not that I have a lot of faith in MS's product quality here, but still, saying that users won't sign for a free service because it's a service they don't think they should have to pay for is a pretty stupid comment.

  11. whenever i get a new or used computer by FudRucker · · Score: 1

    fdisk the anti-virus i run on it

    --
    Politics is Treachery, Religion is Brainwashing
  12. The water analogy by mattdm · · Score: 1

    The rotten egg odor is coming from sulfur. It's probably harmless in the quantity you're getting, even if you can smell it. Whole house filters that remove the odor are going to cost a hell of a lot more than $50 and require ongoing maintenance, so if the water company offers a service to provide extra-filtered water for a one-time fee, you should jump.

    1. Re:The water analogy by Anonymous Coward · · Score: 0

      Indeed, I was just thinking that 50 bucks for any kind of plumbing work is a steal!

    2. Re:The water analogy by mr_mischief · · Score: 1

      If your sulfur content was too high, you'd have diarrhea all the time you drink it as sulfur is a diuretic. If it's just the smell, then there are many ways to deal with that, including filters at the taps.

    3. Re:The water analogy by StellarFury · · Score: 1

      Diruretics are urine. Caffeine is a diuretic, it makes you pee more.

      I don't know the answer, but sulfur can't give you diarrhea if it's a diuretic, it'd have to be a laxative.

    4. Re:The water analogy by mr_mischief · · Score: 1

      Sorry, you're right. Sulfur in different naturally occurring forms is both a diuretic and a laxative.

      More specifically part of the sulfur in a sulfurous water supply is likely to be in some form of salt (like magnesium sulfate) which is a laxative. Elemental sulfur is a mild diuretic. Thanks for catching the distinction and pointing it out.

      The smell in the water isn't from pure elemental sulfur, BTW, but from hydrogen sulfide. That's an irritant at low levels of concentration and can be toxic (even lethal) in high concentrations.

      Sulfur, when present in water, is likely to be in many forms, as it reacts with a number of other elements readily which are also likely to be found near water.

  13. Re:Viruses Aren't a Problem in Linux by Anonymous Coward · · Score: 1, Funny

    perl is relatively malicious on its own

  14. Joke by Hatta · · Score: 0, Offtopic

    They should have called it noOneCares.

    --
    Give me Classic Slashdot or give me death!
  15. For the technoweenies by Sable+Drakon · · Score: 1

    I may not be a big fan of OneCare, but I've got to say this may be a step in the right direction. All too often I'm working on systems that are only a few months old that have been infected, all because the owner didn't notice their AV trial had expired. I'm sure that MS will/should make it easy to remove for those that are tech savy and wish to use their own personal AV package. But for the n00bs and dumbasses out there, this is a good thing to have, just like making Windows Defender a part of Vista.

    --
    The Amarri pray for god, the Caldari pray for profit. the Gallente pray for peace, but the Minmatar pray their ships hol
  16. Not based on Onecare. by Deathlizard · · Score: 1

    Supposedly, Morro is based on Forefront Client Security, and onecare has been completely phased out. Considering the poster, I'm surprised that the article didn't say that morro eats babies and killed your dog.

    As for Onecare, I had it. It was a great scanner and a firewal. The only reason I got rid of it was because of the onecare circle. in Onecare you had 3 licences. In version 2.5, they developed this Onecare Circle to help you keep track of security on all three copies. and all it would do is scream about this pc being out of date, or scan this pc, or backup this one, or the firewall isn't working on this PC when it was. after two months of that nonsense (since you couldn't shut it offat the server side) I said to hell with this and put avira back on.

  17. Car Analogy by Anonymous Coward · · Score: 3, Insightful

    I have to use a bad car analogy. If I buy a BMW and it breaks down, I take it to the BMW dealer to work on it. Some people obviously opt for third party repair, but a lot trust the manufacturer, even though it is often design problems that caused the breakdown. I understand that people have unreasonable expectations that their purchases don't have vulnerabilities and will last forever, but the other 95% of the population recognizes that complicated systems need repairs and protection.
    I don't know if this will be successful, but to think that it should not be trusted or immediately dismissed is ignorant. That being said, I don't use Microsoft products, largely because I don't like AV. Linux FTW!

  18. No thanks by ZOMFF · · Score: 2, Informative

    If it's anything as effective as One Care, I'm going to stay away. I received a free 1 year subscription to One Care at a Microsoft event about 2 years ago and ran it until it expired. After removing it and re-installing my previous Symantec product, it detected around a dozen viruses and malware infections that One Care did not notice. Since then I've kept my distance from any Microsoft AV type product.

    --
    Launch every sig.
  19. I always use Antivirus 2009! by erroneus · · Score: 2, Funny

    It works on everything I try it on! It works on Windows and Linux and Mac OS X! I just have to go to a web page and it scans my machine and tells me how many viruses I have.

  20. Re:Viruses Aren't a Problem in Linux by drooling-dog · · Score: 1

    Trolling a little, eh? Your post is complete nonsense.

  21. Re:Viruses Aren't a Problem in Linux by Anonymous Coward · · Score: 1, Informative

    "Right, there's no way you could have, say, a malicious perl script." - by sqlrob (173498)
    on Friday June 12, @09:46AM (#28307331)

    Agreed, 110%... And, "right, there's no way you could have, say, a malicious javascripted page or malicious javascript adbanner affect Linux either"

    (NOT! Mainly because javascript runs everywhere & is the "vector for infection" across any OS there is, via webbrowsers themselves - correct me if I am wrong on this account fellas, but, it's right along the same lines that sqlrob is hitting upon...).

    APK

    P.S.=> And, as far as the subject-line above? "Yea, right" (sarcasm) again, because these items show otherwise:

    -----

    Bitten By the Red Hat Perl Bug:

    http://linux.slashdot.org/article.pl?sid=08/08/29/1423201

    (Per SQLRob's statement, no less)

    -----

    Linux.Slapper.Worm:

    http://www.symantec.com/security_response/writeup.jsp?docid=2002-091311-5851-99

    -----

    New worm targets Linux systems (Lupper):

    http://news.cnet.com/New-worm-targets-Linux-systems/2100-7349_3-5938475.html

    -----

    But, then again, because it was said on SLASHDOT that "Viruses aren't a problem in Linux", per the subject-line above (again)?

    "Well, heck, those other sources I just put out MUST be lies"... right, Linux Penguins?

    Hate to tell you this truth then: "NOT!"

    Because the main thing defending Linux vs. these "heinous machinations" is the fact it is less used than Windows (The most used OS on the most used hardware platform for personal computers in x86 that there is, bar-none)...

    I.E.-> Security by obscurity, as the saying goes, IS what defends Linux from attacks! IF Linux is ever as widely used as Windows is, you can bank on it that it will be just as oft attacked as Windows is & has been the past decade++ now, because it will be the most used. MacOS X, once it started gaining market share, began to be attacked a lot more than any other *NIX variant I know of, because of it gaining ground... same thing WOULD happen to Linux, should it start stealing personal computer desktop share worldwide.

    (Mainly because today's malware makers aren't out to "wreck your machine", as they used to be - now, it's a far more serious game: They're after your personal information & monies (such as stealing credit card #'s &/or other personal info.) OR turning your machine into a zombied DDOS slave, so it can be used to attack others - so, to do that? These malware makers did the LOGICAL thing (from their pov), & that's to attack the most widely used body of systems there is, Windows NT-based ones!) apk

  22. Would be good if it was forced via Windows Update by ssjx · · Score: 1

    ..to computers that don't have any antivirus software on. Same with Defender too... Although AVG and other free antivirus tools are pretty good, a lot of people never think about actually getting and installing them.

    --
    Visit ssjx.co.uk
  23. Re:Viruses Aren't a Problem in Linux by parodyca · · Score: 1

    Gee, you had to go back 8 years to find three issues. The first one isn't even malware, just bad programming by the vendor that reduces performance. The next two are specific to Apache web servers, NOT Linux.

    If those were the best examples you could come up withm then I guess you succeeded in disproving your own point.

  24. The Microsoft Ethical Problem by artgeeq · · Score: 2, Insightful

    "'Consumers are hesitant to pay for a Microsoft security product that will remove problems in other Microsoft products,"' Well, yes. But it is not just that. We already pay for Microsoft product defects in other ways too. Let's say you are doing a major rollout of Active Directory or Exchange. Sometimes, the only way you get a bug fix is to get a support contract from Microsoft or hire a company that has a support contract. Any Exchange administrator of a good size organization can tell you that Exchange has more than its fair share of bugs, and this new one, Exchange 2007, is no exception. Which leads to the question, where is the incentive on the part of Microsoft to produce really good software? Why not just produce mediocre software and then ask people to pay more money to fix it?

  25. And to top it off by xednieht · · Score: 2, Funny

    There's a type in the product name - they forgot the 'n' at the end.

    --

    Hope is the currency of fools
  26. Bad analogy by recoiledsnake · · Score: 4, Informative

    'Think of it this way. What if you smelled a rotten egg odor in your water and the water company said, "Sure, we can remove that, but it will cost you $50."

    I think that analogy is broken. Very few malware use the holes in MS software these days. Most of the viruses spread by user error, email, IM, flaws in Flash/Acrobat etc. MS is offering a service to clean them up and does provide free fixes for bugs in their software. Obligatory car analogy, car company sells insurance for breakins and accidents and charges extra. Why not pay for it if the deal is good?

    --
    This space for rent.
  27. The discussion misses the point (maybe) by MarcAuslander · · Score: 2, Insightful

    Infected windows machines are a plague on the internet. Many of these presumably have no useful anti-malware running. Microsoft takes lots of heat, as the comments above prove. So Microsoft decides that trying to sell anti-malware won't work, but maybe giving it away, and I assume bundling it, will get it widely deployed. And take some heat off Microsoft for shipping vulnerable stuff. If this happens, and it works at all, it will be a great improvement to the current mess. To put it differently - it's clearly impossible to make an OS bug proof - so an OS ought to contain defenses against malware out of the box.

  28. better analogy by viralMeme · · Score: 2, Interesting

    "I think that analogy is broken. Very few malware use the holes in MS software these days. Most of the viruses spread by user error, email, IM, flaws in Flash/Acrobat etc"

    Defects in application or 'user error' shouldn't lead to the OS being compromised or the consumers having to pay the sellers more money to fix their defective product.

    1. Re:better analogy by recoiledsnake · · Score: 3, Insightful

      "I think that analogy is broken. Very few malware use the holes in MS software these days. Most of the viruses spread by user error, email, IM, flaws in Flash/Acrobat etc" Defects in application or 'user error' shouldn't lead to the OS being compromised or the consumers having to pay the sellers more money to fix their defective product.

      Name a OS where user error can't lead to the OS being compromised. Maybe only in a very locked down system like a kiosk , but a kiosk is not every useful and the user won't have any freedom. If you can install Firefox, you can install a virus. Unless there's a whitelist, but would you trust a whitelist maintained by MS? An alternative is total application virtualization, but given the fact that applications need to talk to each other and be able to access user files make it tough.

      --
      This space for rent.
    2. Re:better analogy by DragonWriter · · Score: 1

      Name a OS where user error can't lead to the OS being compromised.

      The risk can be greatly mitigated by a system similar to that used by bitfrost, where installation of a program also involves the program requesting the needed permissions. A system in which programs usually run with the full privilege of a particular user account rather than with program-specific permissions exposes the user to much greater risk from the compromise of any program (this is, of course, more true when the user account at issue is an admin account, which Microsoft has made some strides in dealing with, but its still very much a problem even with "regular" user accounts.)

      If my web browser can't -- because of restrictions enforced by the OS based on permissions it requested at installation -- write to anything but the local storage space it uses for web applications and its bookmarks and history files, and if it can't read arbitrary data on the hard disk, then there are pretty firm boundaries to what damage that can be done if it is compromised. But if the OS doesn't support that kind of isolation, any compromised application is equivalent to hijacking the user account that would normally run the application. It may be impractical to make most consumer applications uncompromisable, but it certainly isn't impractical to make available the tools to limit the damage that compromise to one application can do, and there is nowhere to do that but in the OS.

    3. Re:better analogy by Anonymous Coward · · Score: 0

      Have you ever heard of SELinux?

    4. Re:better analogy by recoiledsnake · · Score: 1

      If my web browser can't -- because of restrictions enforced by the OS based on permissions it requested at installation -- write to anything but the local storage space it uses for web applications and its bookmarks and history files, and if it can't read arbitrary data on the hard disk, then there are pretty firm boundaries to what damage that can be done if it is compromised.

      You seem to be pretty misinformed. IE7/IE8 on Vista/Windows 7 already do exactly what you described from like 3 years. That's why it's harder to exploit it than Safari on OS X or Firefox on Windows/Linux/OS X. The industry is behind Microsoft in this. I think Chrome does it too on Windows but am not sure.

      The risk can be greatly mitigated by a system similar to that used by bitfrost, where installation of a program also involves the program requesting the needed permissions. A system in which programs usually run with the full privilege of a particular user account rather than with program-specific permissions exposes the user to much greater risk from the compromise of any program (this is, of course, more true when the user account at issue is an admin account, which Microsoft has made some strides in dealing with, but its still very much a problem even with "regular" user accounts.)

      Your solution takes care of only holes in applications. What about installing a new App? As I said in my original post, the threat is more these days with malware passing through email, IM, USB drives, etc. The malware can just request all the possible permissions at install time. How can the OS verify that it was a legit app and not malware or vice versa?

      --
      This space for rent.
    5. Re:better analogy by shutdown+-p+now · · Score: 1

      If my web browser can't -- because of restrictions enforced by the OS based on permissions it requested at installation -- write to anything but the local storage space it uses for web applications and its bookmarks and history files, and if it can't read arbitrary data on the hard disk, then there are pretty firm boundaries to what damage that can be done if it is compromised.

      What you describe is precisely how IE7+ works on Vista and Win7.

      But if the OS doesn't support that kind of isolation, any compromised application is equivalent to hijacking the user account that would normally run the application. It may be impractical to make most consumer applications uncompromisable, but it certainly isn't impractical to make available the tools to limit the damage that compromise to one application can do, and there is nowhere to do that but in the OS.

      Windows does provide this kind of isolation (as do all other modern OSes). It's up to the application writers to use that, however.

    6. Re:better analogy by shutdown+-p+now · · Score: 1

      Have you ever seen SELinux on the desktop configured in such a way as to actually mitigate "user mistake" attack vector?

    7. Re:better analogy by DragonWriter · · Score: 1

      You seem to be pretty misinformed. IE7/IE8 on Vista/Windows 7 already do exactly what you described from like 3 years.

      What I was describing was a security model, that to be effective, the OS must enforce on all applications.

      Your solution takes care of only holes in applications. What about installing a new App?

      My solution addresses that, too, specifically. Of course, the user can choose poorly in granting permissions when an app is installed; as long as users have administrative control, they can make errors that compromise security. What restricting all apps to permissions that must be requested at implementation does is limit where the most dangerous failures can occur and thus mitigate the risk of failure.

    8. Re:better analogy by DragonWriter · · Score: 1

      Windows does provide this kind of isolation (as do all other modern OSes). It's up to the application writers to use that, however.

      If its up to application writers to use it, rather than enforced before allowing anything to run, then it is not the kind of security model I am describing. The model I am describing is where software cannot run unless it has requested permissions from the OS (which, in normal circumstances, would require the user to confirm the grant, though such a security model might allow some software to grant subsets of its own access rights to other software, though that itself would have to be a specific, requested permission), and cannot ever act outside of the security permissions it requested at installation.

  29. Re:Viruses Aren't a Problem in Linux by Anonymous Coward · · Score: 0

    "Gee, you had to go back 8 years to find three issues. The first one isn't even malware, just bad programming by the vendor that reduces performance. The next two are specific to Apache web servers, NOT Linux." - by parodyca (890419)
    on Friday June 12, @10:12AM (#28307657) Homepage

    Does it matter how far back I had to go, & no, not all are from "8 yrs. ago", because below also shows otherwise!

    So, to prove the subject-line is bullshit? I provided contrary evidence thereof...

    However, it appears You need more proofs then, apparently, so here you are/"ask & ye shall receive":

    Linux RAMEN Worm:

    http://service1.symantec.com/sarc/sarc.nsf/html/linux.ramen.worm.html

    Net-Worm.Linux.Mighty:/b>

    http://www.viruslist.com/en/viruses/encyclopedia?virusid=23864

    DroneBL Security researchers warn of Linux Router worm (PsyB0t)

    http://www.tcmagazine.com/comments.php?shownews=25399&catid=5

    Linux ADORE Worm:

    http://www.sss.ca/sensible/home.nsf/6481a22be8dfdd19852568c900171fc6/abbbaec934169f6d85256a280054fd31?OpenDocument

    New Worm Targets Linux Web Service Holes:

    http://www.eweek.com/c/a/Linux-and-Open-Source/New-Worm-Targets-Linux-Web-Service-Holes/

    gicumz worm:

    http://blogs.securiteam.com/index.php/archives/305

    Linux malware list (37 Viruses, worms, & trojans on Linux):

    http://en.wikipedia.org/wiki/List_of_Linux_computer_viruses

    (Want more?? I'll supply them... & they're not all "8 years back either", don't you OR can't you read & determine dates? Apparently not...)

    APK

    P.S.=> Better luck next time, because all of your "it's old news" b.s. propoganda doesn't matter, if your subject-line is absolute b.s. - gotta love the Linux Penguin crew around here, with their "straight outta pravda" 1/2 truths they spout... lol! apk

  30. sulfurous water analogy by viralMeme · · Score: 2, Insightful

    The water company advertised spring water filtered through volcanic rock from water frozen in glaciers milena ago. We called them and told them about the 'rotten egg odor'. They then offer to license a charcoal filter to us for $50.00 a year, to be fitter on premises at another $40.00. If we used any other charcoal filter, they advised us that we might be violating some other company's patents. They reassure us that if we buy their charcoal filter they will give us patent protection against getting sued by this other company. The water company hold a financial interest in the other company. They don't ever offer to indemnify us against getting sued for getting sulfur in our water. Even though they are the only water company that sells sulfurous water. The media invariable refer to 'sulfurous water', instead of $company sulfured water ?

  31. Latest AV-Comparatives report.. by Henk+Poley · · Score: 2, Informative

    As much I would like to bash Microsoft from time to time. latest AV-Comparatives report has them up there with ESET NOD32. With Microsoft you never know if that included some sums of money, but yeah.

  32. Very funny name by mattr · · Score: 1

    I wonder how they got the name, sounds a bit like tomorrow or something Spanish..

    I found it funny as the word morro in Japanese is how you describe getting a fatal sword thrust to your heart / neck, i.e. "to suffer a fatal blow that hits you right in a critical place" is a way to translate it.

    Of course as others note, M$ selling AV is itself a funny proposition.

    1. Re:Very funny name by Anonymous Coward · · Score: 0

      it's a reference to Morro de Sao Paolo, a village on the island of Tinhare in Brazil

  33. Symantec is no longer credible by Anonymous Coward · · Score: 0

    I stopped using Symantec products after they failed miserably in supporting Vista.

    They tried to blame Microsoft, and yet their competitors (like Kaspersky) already had vully featured Vista-compatible versions out already.

    Symantec's solution was to ship out their broken application and hope nobody noticed.

    1. Re:Symantec is no longer credible by Phroggy · · Score: 1

      That was NAV2007. It didn't support Vista out of the box, but eventually they released an update, and it seemed to work OK for me.

      However, NAV2009 is MUCH better. I suspect that Vista forced them to do some major rewrites in 2007 (because 2006 was a steaming pile of crap), and they realized that by cleaning up their crap they could actually improve the end-user experience while making life easier for themselves in the long run. NAV2008 sucked less, and in 2009 they've completely redesigned how the program operates. It's as though they realize everyone hates them and they have competition now. Seriously, if you haven't tried it yet, you should download the NAV2009 trial to see what I'm talking about.

      Note: I am not affiliated with Symantec, and I'm currently running AVG Free on my Win7 box.

      --
      $x='S24;r)>63/* h@<5+oZ)32"5cz';$me='phroggy'x$];
      $x=~y+ -xz+\0-Tx+;print$_^chop$me for split'',$x;
  34. Why not? by PeeShootr · · Score: 1

    Why doesn't MS just spend the time building an OS that is not as vulnerable to viruses and malware? Since they won't do that, why not just build the AV stuff in at a lower lever so that it is not obvious to the user that they are even running AV? MS likes to sneak stuff in under your nose anyway, why not something that will make the OS safer and more stable? Oh yeah, it's probably because of some conspiricy like they are the major shareholder in Symantec or Norton...

    1. Re:Why not? by Anonymous Coward · · Score: 0

      Why can't there be world peace? Because there are bad people in the world.

  35. I've got a question for McAfee, Symantec, et al... by rnturn · · Score: 1

    If I was unwilling to pay Microsoft $50 to buy a product that detected and fixed problems with their other products, what makes you think I'd find it any more palatable to be buying a similar product from you folks?

    Don't bother answering, guys. Your response would only make me laugh. You see my desktop hasn't needed any of your products for a good number of years now. In fact, the only Microsoft product loaded on any of our computers is a semi-broken version of XP that now wants to be re-authorized because I added an old SCSI controller to the system. Like that's ever going to happen. (When I get the time, another 80GB of disk space will be available for my daughters to use on Linux.)

    --
    CUR ALLOC 20195.....5804M
  36. Re:Would be good if it was forced via Windows Upda by mr_mischief · · Score: 1

    So it can "fail" to recognize my anti-virus software, and sign me up to have all my net traffic routed through Microsoft for analysis? No thank you.

  37. Money? Damn! by darkpixel2k · · Score: 1

    OneCare is to get the boot as of June 30 (along with finance app Microsoft Money).

    Man--I have mixed emotions about this one.
    Microsoft Money is the one app I still miss from the Microsoft platform. There's nothing like it for Linux.
    I occasionally think about settings up a virtual machine to run Money--but I cringe about paying $125 for an XP license to run a $50 program.

    But thank God I'm free from the curse. Now I never have to think wistfully about any app on the Microsoft platform...

    --
    There's no place like ::1 (I've completed my transition to IPv6)
  38. Re:Would be good if it was forced via Windows Upda by trickyD1ck · · Score: 0

    This would be ZOMG M$ Windoze Con$piracy abusing MONOPOLY power! European Comission come save us!

  39. Beware the closed source by MaerD · · Score: 2, Insightful

    I can't believe the biggest focus out of all this is on the "evolution" (or whatever) of their anti-virus, with little mention of the end of the Money product line.

    I feel for all the people who have been locked in to MS money, like the one in the article. Hopefully it will drive him to open source... however I haven't really been able to find a good alternative to Money and/or Quicken for Home/SMB finance.. any suggestions?

    --
    I put on my robe and wizard hat..
    1. Re:Beware the closed source by wolfemi1 · · Score: 1

      KMyMoney is one that I've been using for a few years now, and it's very, very good. No Windows version yet, but if you can't wait (or run andLinux, or use VmWare Player, or get KDE for Windows, or...), you can use GnuCash, which is also quite good.

  40. Re:Viruses Aren't a Problem in Linux by Anonymous Coward · · Score: 0

    It'd be easier to include obfuscated malicious code into some other source code to give you remote access to the machine.

  41. Re:Money? Damn! by plague3106 · · Score: 1

    I agree; Money is a good program. Of course, it's not the only app on Windows I use, but since we're both in the same boat... what do you plan on to replace Money?

    And please, nobody say GNUCash. It's a pile of crap... I actually moved from GNUCash TO Money!

  42. whoever smelt it dealt it. by Anonymous Coward · · Score: 0

    Must be true, Mcaffe and Symantec have been making "substandard security technology" for years now. The ol "takes one to know one" is irrefutable.

  43. Microsoft's disjointed AntiVirus strategy by Gary+W.+Longsine · · Score: 4, Informative

    Microsoft has, for years, maintained three separate tools in this space (that I know of, there might be others). They change the names of them periodically, to confuse their hapless victims.

    Microsoft Windows Malicious Software Removal Tool
    You gotta read this page. They release a new version every month. It apparently cannot remove viruses which are not actively running. Why is this tool not built in to Microsoft Windows Defender?

    Windows Live One Care
    This link shows a forum moderator, chastising a poor infested user for asking a question about a different Microsoft antivirus product -- Microsoft Windows Defender. Why are these separate products, again?

    Microsoft Windows Defender
    Formerly known as Microsoft AntiSpyware.

    These should be one product. The fact that Microsoft maintains three separate products to deal with this problem is, itself, an indication of a very serious ongoing problem at Microsoft. As a company, they still don't take this seriously.

    --
    If you mod me down, I shall become more powerful than you could possibly imagine.
    1. Re:Microsoft's disjointed AntiVirus strategy by glennpratt · · Score: 2, Insightful

      This is idiotic, have you seen how many products other companies produce?

      I'll just give you some example analogs off the top of my head:

      Symantec Virus Removal Tools

      Symantec Antivirus

      Norton Internet Security

      And in response to your questions.

      Malicious Software Removal Tool is targeted at the biggest threats and designed to be distributed via Windows Update, it helps protect unmonitored PCs from the biggest threats. Live One Care is an antivirus suite that is, or at least wasn't free, so of course it was a different product. Windows Defender is antimalware, not antivirus. Almost every security company has a similar product matrix.

    2. Re:Microsoft's disjointed AntiVirus strategy by DragonWriter · · Score: 4, Funny

      Microsoft Windows Malicious Software Removal Tool

      Whenever I see that name, my mind initially takes it as a Software Removal Tool that is Malicious rather than a tool for removing malicious software.

    3. Re:Microsoft's disjointed AntiVirus strategy by a-zarkon! · · Score: 1

      That link for the Windows Live One Care is AWESOME. Where do I sign up for that kind of service?

    4. Re:Microsoft's disjointed AntiVirus strategy by Z34107 · · Score: 4, Informative

      The "Malicious Software Removal Tool" is pushed through Windows Update. It's not meant to be a full-blown virus scanner, just an install script that will neuter a few of this month's viruses. It's created for the computer illiterates with no virus scanner in the hopes that they left Automatic Updates on.

      Windows Defender was supposed to be a very basic, lightweight application to provide some warning that you're infected It's part of Windows Vista, installable on Windows XP, and has some nifty functions that fall between msconfig and HijackThis. I can't speak to it's detection rate, but our help desk has gotten a few calls from people who didn't realize they were infected until Windows Defender told them so.

      Windows Live OneCare was their attempt at competing with Symantec or Network Associates. They bought the basic engine from some other company, saw that the entire thing was written in VB 6, facepalmed, and rewrote it as OneCare. It also helps with remote backups and whatnot.

      They really shouldn't be all one product, as they serve completely different purposes. Although if they made Windows Defender a bit more powerful, they'd have an uninstallable version of Live Care.

      --
      DATABASE WOW WOW
    5. Re:Microsoft's disjointed AntiVirus strategy by InsertWittyNameHere · · Score: 1

      Don't forget about Forefront Client Security. It's also free for home use.

    6. Re:Microsoft's disjointed AntiVirus strategy by Anonymous Coward · · Score: 0

      Same here.

    7. Re:Microsoft's disjointed AntiVirus strategy by Anonymous Coward · · Score: 0

      Well, it is nice to be able to pick and choose different vendors, including free or opensource, for each item.

      But as to naming, perhaps they should rename their products:

      1. "Windows Defender" should be renamed, "Looks Like You're Infected." (LoLiYIn)

      2. "Windows Live One Care" should be renamed, "One Part of our many software defending products." (OPoo MaSoDeP)

      3. "Malicious Software Removal Tool" should be renamed, "Got thru all our other defenses, now we've got to fix it." Or (GoTaooD, NoWGoTFii.)

      And, of course, MS should announce it's really quite close to the OpenSource community. Their product, Microsoft Windows, is "open"... That's open to attacks, such that their 3 defensive programs are needed, if not quite effective.

  44. Re:Viruses Aren't a Problem in Linux by Anonymous Coward · · Score: 0

    The wikipedia article is cute.

    Jump to: navigation, search

    The Linux operating system, Unix and other Unix-like computer operating systems are generally regarded as well-protected against computer viruses.[1]

    There has not yet been a single widespread Linux malware threat of the type that Microsoft Windows software currently faces; this is commonly attributed to the malware's lack of root access and fast updates to most Linux vulnerabilities.[2]

    Jump to: navigation, search

    The Linux operating system, Unix and other Unix-like computer operating systems are generally regarded as well-protected against computer viruses.[1]

    There has not yet been a single widespread Linux malware threat of the type that Microsoft Windows software currently faces; this is commonly attributed to the malware's lack of root access and fast updates to most Linux vulnerabilities.[2]

    The likelihood of a successful trojan on any distro using a repository system is as close to zero as you'd want.

    I'm sure you already know about unix permissions and SELinux. Have you tried running Firefox via chroot on windows yet? Linux is more secure, period. It's not perfectly secure, but it has never had a major virus. Neither, AFAIK, has Mac OS X. Also, linux can be made more secure than just about any other OS, without losing functionality.

    Now, try counting the number of windows trojans. The platform is easier to write viruses for--especially on systems older than Vista, or Vista systems with UAC disabled (that is, the vast majority of Windows installs). Windows has many more vulnerabilities, and once you get onto the system, you've pretty much got the whole enchilada. You can replace something like disk.sys and do a low-level write to the boot sector (or wherever). And do you want to open the cans of worms that are ActiveX and IE6?

    It's a very nice troll, but we're not talking out of our asses here.

  45. It's about time. by thePowerOfGrayskull · · Score: 1

    When you create a product that spawns a multi-billion dollar market focused on protecting people from the flaws in your product, you've done something wrong. This is something that should have happened years ago.

  46. Bing! Morro! by argent · · Score: 1

    They got Kermit the Frog and Big Bird naming their products now.

  47. Re:Viruses Aren't a Problem in Linux by sqlrob · · Score: 1

    It is easy to make a trojan on Linux. Unix permissions mean squat to effective malware. Running as the user is more than enough to spew spam or be part of a botnet. Yes, it's easier clean. No, it doesn't work if someone else logs in. When you're talking single user systems, that's irrelevant.

    SELinux and other MAC are a lot of the solution. Problem is, there isn't anything good enough for the average user, not yet anyway. I was hoping Leopard was going to be it, but Apple blew it. MS made Vista too annoying and people turn it off, assuming they hadn't gone back to XP.

  48. Don't underestimate the power of FREE! by scott1110 · · Score: 0

    I know a ton of people that will use it because it is free- As will I, but I will at keep a regular back-up.

  49. First? by KeX3 · · Score: 1

    Morro will use the same scanning engine as Windows Live OneCare, Microsoft's first consumer-grade antivirus package

    Microsoft's first consumer-grade antivirus package? Oooh, you must mean MSAV, released once, updated never. The most useless antivirus software in the history of antivirus software.

  50. Re:Viruses Aren't a Problem in Linux by RobDude · · Score: 1

    It doesn't matter.

    You don't need *any* software vulnerability to infect a user's machine with malware. All you need is a user who will run your application.

    In any OS that let's the end-user decide what software to run, Malware can exist.

    A dumb Linux user is just as likely to install 'Free Screen Savers!!!' as a dumb Windows user.

  51. Re:Viruses Aren't a Problem in Linux by Anonymous Coward · · Score: 0

    "I'm sure you already know about unix permissions and SELinux. Have you tried running Firefox via chroot on windows yet? Linux is more secure, period. It's not perfectly secure, but it has never had a major virus. Neither, AFAIK, has Mac OS X. Also, linux can be made more secure than just about any other OS, without losing functionality." - by Anonymous Coward on Friday June 12, @11:29AM (#28308857)

    I sure do, & note it in this article (yes, it's for Windows, & allows securing Windows NT-based OS of "modern variety" (2000/XP/Server 2003 & even VISTA etc. et al) FAR better than they are by default) ->

    ----

    HOW TO SECURE Windows 2000/XP/Server 2003 & even VISTA, + make it "fun-to-do", via CIS Tool Guidance (& Beyond):

    http://www.tcmagazine.com/forums/index.php?s=1cfece2a1c826e6840c98db9377ac9c8&showtopic=2662

    ----

    CIS Tool is also noted well by COMPUTERWORLD, & is MULTIPLATFORM (meaning *NIX users (BSD &/or Linux variants + SOLARIS users can use it as well)... in fact, Bert64, a user here on /.? His results are featured in that guide, 1st post... & he used SuSe Linux iirc!

    SeLinux is a set of kernel hooks (kernel patching) that allows better than std. *NIX permissions, but then again? So do Windows NT-based OS' ACL's... & yes, they work:

    Would you like to see others' results which have been just like my own from that guide above?

    (With myself & others seeing no virus/trojan/spyware/malware in general infections here for more than a decade using the principals &/or techniques my article above notes on Windows)? I can supply them, just ask (url's & quoted testimonials)

    Try this one, for starters:

    http://www.xtremepccentral.com/forums/showthread.php?s=ae352cd32542fe49a55fe00b11086449&t=28430&page=3

    "Its 2009 - still trouble free! I was told last week by a co worker who does active directory administration, and he said I was doing overkill. I told him yes, but I just eliminated the half life in windows that you usually get. He said good point. So from 2008 till 2009. No speed decreases, its been to a lan party, moved around in a move, and it still NEVER has had the OS reinstalled besides the fact I imaged the drive over in 2008. Great stuff! My client STILL Hasn't called me back in regards to that one machine to get it locked down for the kid. I am glad it worked and I am sure her wallet is appreciated too now that it works. Speaking of which, I need to call her to see if I can get some leads. APK - I will say it again, the guide is FANTASTIC! Its made my PC experience much easier. Sandboxing was great. Getting my host file updated, setting services to system service, rather than system local. (except AVG updater, needed system local)" - THRONKA (forums user @ xtremepccentral)

    ----

    "It's a very nice troll, but we're not talking out of our asses here." - by Anonymous Coward on Friday June 12, @11:29AM (#28308857)

    Funny: The lists I put up of over 50++ virus/trojans/worms & other exploits possible on Linux in my previous responses to you, DO seem to show QUITE otherwise...

    APK

    P.S.=>

    "The wikipedia article is cute." - by Anonymous Coward on Friday June 12, @11:29AM (#28308857)

    Sure is: It shows over 37++ virus/trojans/worms & other exploits possible (or, were possible) on Linux... apk

  52. it's about time! by yanyan · · Score: 1

    It's about time MS released an AV product! All those i've tried (Clamwin, AVG, Symantec, etc.) can't detect my viruses. I know for a fact they're called "kernel32", "UAC", "svchost", and the dreaded "taskman." Who knows, there might be more of them gallivanting around my computer!

  53. Re:Viruses Aren't a Problem in Linux by JasterBobaMereel · · Score: 1

    The problem is not making a trojan for Linux, it is getting it run and getting it to survive a reboot

    Getting it to run is harder since it is normally not just a click to run, getting it to survive a reboot is much harder since a user does not normally have the rights to do this ...

    There are malware and viruses for Linux, but they were all without exception limited by they fact that most systems were unlikely to allow them to run themselves and on the few that did they did not survive a reboot, all the mildly successful ones used a flaw in a program to get themselves run and when this was patched (usually very soon after) then it died because the majority of systems were updated with the fix

    The real problems with Windows systems are being addressed by Microsoft, default rights (don't run as admin, and make sure most programs don't assume/require you are running as admin), auto update (the main parts of a windows systems are now updated automatically, but not all parts and not all programs), don't be a monoculture (Not good in Windows, but Ubuntu Linux is going the wrong way on this....)

    --
    Puteulanus fenestra mortis
  54. Windows should have had AV included long ago. by darkjohnson · · Score: 1

    The cynic in me doesn't trust any of the big AV security companies. They have a clear motive to make sure their products are needed. An OS manufacturer on the other hand is motivated to produce a secure environment, and in this case where Apple has been hammering Microsoft about this issue, there is even more motivation. I'll certainly be giving this free offering a try. BTW- The rotten egg analogy was pretty lame.

    1. Re:Windows should have had AV included long ago. by Ltap · · Score: 1

      You don't trust the big AV companies, yet you trust Microsoft? I admit, shipping Windows with an antivirus is a good idea, but it has been for years - most pre-installed copies have a trial version of Norton or McAfee on them.

      --
      Yet Another Tech Blog
      (but so much more, including game and movie reviews)
      http://yanteb.peasantoid.org
    2. Re:Windows should have had AV included long ago. by darkjohnson · · Score: 1

      Trust? I trust a company to want to deliver value so their product continues. And when they fail to, the product fails (like Vista). Yes, I don't trust the big AV companies because they survive by consumer fear. Do I think they're perpetrating viruses? Well, let's just say I wouldn't be surprised if they were. I would rather think they're not, but if there was a slow down in attacks where would they be financially? All the 'trial' versions are, are ways to ease you into paying for something you wish you didn't have to pay for, no?

  55. Hilarious by Ltap · · Score: 1

    The fact that it was McAfee saying that makes me laugh... but even so, it's likely their product will be better than any Microsoft AV will be. Why? Not that Microsoft will make the worst AV, but it's about dedication. "Internet Security" companies like Norton and McAfee only control a niche market (firewall/AV software), so they will prop up their flagship products as much as they can, because without them, they're sunk. A company like Microsoft won't have to maintain it out of necessity, and this could easily go the way of FrontPage, OneCare, Money (as mentioned in TFS), Picture It!, and other products that it shed like excess skin as the years went on.

    --
    Yet Another Tech Blog
    (but so much more, including game and movie reviews)
    http://yanteb.peasantoid.org
  56. Giant Antispware--Windows Defender by DigitalCrackPipe · · Score: 1

    Maybe their choice of source product isn't as good this time, but they previously made (I think) a good choice in bringing Giant AntiSpyware into the fold as Windows Defender. Giant was at the time one of the better scanners, which would make a good addition particularly for people who don't want to buy/install 3rd party apps. It's only appropriate that windows had both spyware and virus removal built in (note that there's already the malware removal component of windows update).

    This leaves the door open (or maybe sets the bar higher) for 3rd party apps to compete, but at least gives the average users (who don't do their due dilligence in cleaning the PC) a fighting chance of having a non-zombie pc.

    On a more pessimistic note, all that correct posturing will turn to dust if the product really does route all data through microsoft, because I'll be blocking it right out of the gate.

  57. Re:Viruses Aren't a Problem in Linux by IntlHarvester · · Score: 1

    When you login to your Linux desktop, there's a ton of bash scripts and other startup software running behind the scenes. Getting a program to survive a reboot on a desktop system is not difficult.

    --
    Business. Numbers. Money. People. Computer World.
  58. Never Lark nor Eagle... by argent · · Score: 1

    Carl "Bing" Morro is the protagonist of the novel "Never Lark Nor Eagle" by Ray Castagnaro.

    Microsoft "Bing"
    Microsoft "Morro"
    If the next one is Microsoft "Carl" I think Ray needs to talk to his lawyers.

  59. Examine the track record... by Kazoo+the+Clown · · Score: 0, Flamebait

    Given how good they've been at filtering SPAM from my hotmail account (about as good as a deranged chimpanzee using a dartboard), I wouldn't go near this thing...

  60. Will it warn you that by Anonymous Coward · · Score: 0

    you are running the worst piece of malware ever created- namely a M$ OS? I doubt it.

  61. Something wrong with this picture by Anonymous Coward · · Score: 0

    Has it occurred to anyone that if Microsoft is not going to make money from this anti-malware product because they choose not to charge users for it. Wouldn't it have made more sense to invest the money spent in the development of this into doing a better job of patching Windows, and generally making it more secure from malware? For the same company that makes such an insecure operating system to also make a piece of software put a "security band-aid" over it makes no sense at all. The Microsoft programmers have access to the Windows source code right to do this right? It's just a matter of upper management making a smart decision with money spent on R&D.

    Peace

  62. I'll definitely try it by microbee · · Score: 1

    Why?

    1. I don't normally worry about viruses or malwares. Running one is just a precaution, especially after downloading stuff from net.
    2. Symantec and McAfee just SUCK. I don't know why they are still in business. Their business model is to spread FUD so people will buy their shitty products that do more harm than good.
    3. I've had much more success with free AV software than non-free ones. Microsoft Defender is actually pretty good. There is also a Chinese malware product called 360safe (http://www.360safe.com) that I use. On the contrary S/M never cleaned a malware for me once.

  63. Re:Money? Damn! by larry+bagina · · Score: 1

    MS Money running in virtual box is the best finance app for the macintosh, too. Actually, I use 2004 since when I tried 2005 I didn't like the UI as much, but I'm still a little sad to see it go, even if I wasn't planning on upgrading.

    Does it work with Wine?

    This does show the problem with closed source software (and closed source file formats). If microsoft is killing a product, they should release the file format specs so users can migrate their data. exporting as QIF loses information in the translation.

    --
    Do you even lift?

    These aren't the 'roids you're looking for.

  64. Re:Money? Damn! by larry+bagina · · Score: 1

    update: I did a quick search (before trying to reverse engineer it myself) and with a bit of hex editing (and repairing), you can open it with Access

    --
    Do you even lift?

    These aren't the 'roids you're looking for.

  65. Re:Money? Damn! by darkpixel2k · · Score: 1

    I agree; Money is a good program. Of course, it's not the only app on Windows I use, but since we're both in the same boat... what do you plan on to replace Money?

    And please, nobody say GNUCash. It's a pile of crap... I actually moved from GNUCash TO Money!

    I switched to MoneyDance--it's the one proprietary linux app I run on my box. It's decent, but it's nothing like MS Money. Some basic reports, check register, tracking loans--just none of the 'polish' that Money has. It's getting better though, and I believe you get free upgrades for life once you buy it.

    --
    There's no place like ::1 (I've completed my transition to IPv6)
  66. Re:Money? Damn! by donaldm · · Score: 1

    Microsoft Money is the one app I still miss from the Microsoft platform. There's nothing like it for Linux.

    Well if you really want to run Linux on your PC and still want to lock yourself into products that only run under an Microsoft OS there are two ways of approaching this problem. Obviously the first step is to install a recent Linux distribution on your PC then.

    1. Run Microsoft Money under Wine (it does work) or
    2. Run a (cough!) legitimate version of MS Windows under virtualisation such as Vmware or Virtualbox (there are others as well) and install MS Money as normal. At least the installed MS Windows will be sand boxed.

    The total cost of installing MS Money under Linux is exactly the same as if you installed it under MS Windows and the same is true for all MS Windows centric software.

    Of course a quick Google search will display Linux software equivalents to MS Windows software. In the case of MS Money you have GnuCash, KMyMoney, jGnash, MoneyDance, Grisbi, PLCash, CrossOver Office with Quicken, lazy8ledger. All run natively under Linux on the Intel architecture and if you don't like the free solutions you can pay for a proprietary solution that will work under Linux.

    --
    There ain't no such thing as proprietary standards only proprietary formats. Standards are by definition open.
  67. been there, done that by bnjf · · Score: 1

    http://en.wikipedia.org/wiki/Microsoft_Anti-Virus

    Have we forgot that MS already tried to bundle AV with their OS?

  68. AGREED 110%, look out for "terminators"... apk by Anonymous Coward · · Score: 0

    "You don't need *any* software vulnerability to infect a user's machine with malware. All you need is a user who will run your application." - by RobDude (1123541) on Friday June 12, @12:12PM (#28309469)

    TOO true, & unfortunate for folks that create legitimate & harmless wares, such as screensavers which others have mentioned in this exchange (or, others). The misguided miscreants that do so, in creating such malwares that are disguised, truly mess it up for guys & gals that do "freeware/shareware" (like I used to, legitimate benign ones on my part though) via creation of mistrust of their wares nowadays especially.

    I'll give you guys a practical example, which anyone that codes WILL/SHOULD, understand:

    I wrote up a screensaver for the 2005-present Sci-Fi series called "Dr. Who" by the BBC... it internally contained, as a "resource", an .avi file to playback upon execution (which it extracts from WITHIN itself to disk & then into RAM), which was the new series intro. (which I felt was very cool, so I created it for other fans like myself to enjoy) so it was a "SINGLE MOVING PART ONLY" self-contained design which really needed no other parts (other than CODECS to playback the animation).

    I got a LOT of "mistrust" (rightfully so) from the Dr. Who forums where it was featured... until I told them 'scan it first using an up-to-date antivirus &/or antispyware solution', which their admins did, found it safe, & they literally told me "I fell in love with it".

    Which is fine, it was NOT a 'malware'...

    HOWEVER, the "build principal", of a single moving part that contained its other part (.avi file) I used?

    THAT COULD BE USED FOR FOISTING SUCH MALWARES ON OTHERS, & it probably WOULD escape detection by antivirus &/or antispyware programs... I suspect this, because the program itself functioned almost like a "terminator" really, per this quote from the original film "THE TERMINATOR":

    "Listen: The terminator's an infiltration unit - part man, part machine. Underneath, it's a Hyper-Alloy 'combat chassis' - microprocessor controlled (Fully armored, VERY tough), but outside it's living human tissue. Flesh, Skin, Hair, Blood... grown for the cyborgs. The 600 series had rubber skin, we spotted them easy, but these are new. They look human. Sweat, bad breath, everything (very hard to spot)"

    The point being is, that I could have packed in a malware executable INSIDE the legitimate code, alongside the .avi file it played back, & detonated it (especially only @ RANDOM intervals, so it would not be easily spotted)... I also compress ALL/EACH shareware/freeware I have ever done, fully "armoring it" vs. many forms of disassembly (though not all, especially once it is in memory loaded). It's "skin/hair/flesh/blood" was its actual legit code. I however, did NOT pack in a malware into it, only an .avi file as a playable resource... the theory alone there shows it could be used for nefarious purposes though, by packing in a bogus .exe for example instead.

    (And, trust me guys: There truly IS very little "original thought", so IF I CAN THINK OF IT? OTHERS DOUBTLESS HAVE DONE IT... how sad, & it would 'sucker' fans of say, a fav. show via things like screensavers or other apps - taking advantage of human nature in 'fanboyism' I suppose).

    APK

    P.S.=> So, another quote from that film, "THE TERMINATOR", in regards to the poster I am quoting now:

    "LISTEN, & understand: That terminator IS OUT THERE - it can't be bargained with, it can't be reasoned with... it doesn't feel pity, or remorse, or fear, AND IT ABSOLUTELY WILL NOT STOP, EVER... until you are DEAD!"

    This is what scares me, & makes me sad how screwed up + bogus some folks can be... & how STUPID we can be to one another, especially in the name of "the love of money" only... apk

  69. Businesses can't use it by hackiavelli · · Score: 1

    "AVG Anti-Virus Free Edition is for private, non-commercial, single computer use only."

  70. Re:Viruses Aren't a Problem in Linux = b.s.! apk by Anonymous Coward · · Score: 0

    "If those were the best examples you could come up withm then I guess you succeeded in disproving your own point." - by parodyca (890419) on Friday June 12, @10:12AM (#28307657) Homepage

    Well, @ this point, here are 50++ more evidences of his title of "Viruses aren't a Problem in Linux" subject-line being b.s.!

    That all "said & aside"? Here we go:

    Threat Encyclopedia Search Results for *NIX oriented malwares/virus/trojans etc. et al (pages 14-25, approximately 50++ more ontop of the 40 or so I have already noted in my prior posts here):

    http://threatinfo.trendmicro.com/vinfo/virusencyclo/alphalisting.asp?NAV=14&ltr=U

    http://threatinfo.trendmicro.com/vinfo/virusencyclo/alphalisting.asp?NAV=15&ltr=U

    http://threatinfo.trendmicro.com/vinfo/virusencyclo/alphalisting.asp?NAV=16&ltr=U

    http://threatinfo.trendmicro.com/vinfo/virusencyclo/alphalisting.asp?NAV=17&ltr=U

    http://threatinfo.trendmicro.com/vinfo/virusencyclo/alphalisting.asp?NAV=18&ltr=U

    http://threatinfo.trendmicro.com/vinfo/virusencyclo/alphalisting.asp?NAV=19&ltr=U

    http://threatinfo.trendmicro.com/vinfo/virusencyclo/alphalisting.asp?NAV=20&ltr=U

    http://threatinfo.trendmicro.com/vinfo/virusencyclo/alphalisting.asp?NAV=21&ltr=U

    http://threatinfo.trendmicro.com/vinfo/virusencyclo/alphalisting.asp?NAV=22&ltr=U

    http://threatinfo.trendmicro.com/vinfo/virusencyclo/alphalisting.asp?NAV=23&ltr=U

    http://threatinfo.trendmicro.com/vinfo/virusencyclo/alphalisting.asp?NAV=24&ltr=U

    http://threatinfo.trendmicro.com/vinfo/virusencyclo/alphalisting.asp?NAV=25&ltr=U

    &

    New Worm Targets Linux Web Service Holes:

    http://www.eweek.com/c/a/Linux-and-Open-Source/New-Worm-Targets-Linux-Web-Service-Holes/

    More info on the new Linux worm

    http://blogs.securiteam.com/index.php/archives/305

    APK

    P.S.=> Oh, by the by: If the (so far) 90++ evidences of worms, viruses, trojans, malwares & general faults in Linux' security? I think you're not as experienced in these matters as you'd like to think is all - especially with you're stating & agreeing about this exchange's subject-line of "Viruses Aren't a Problem in Linux" etc. et al... apk

  71. Re:Money? Damn! by darkpixel2k · · Score: 1

    Microsoft Money is the one app I still miss from the Microsoft platform. There's nothing like it for Linux.

    Well if you really want to run Linux on your PC and still want to lock yourself into products that only run under an Microsoft OS there are two ways of approaching this problem.

    I think you missed my point. If you compare Microsoft Money to *any* money app on the Linux platform, the linux platform comes up short.

    I don't use Windows in my house. No virtual machines, not even media lying around. But I still miss Money because there's nothing like it for Linux.

    --
    There's no place like ::1 (I've completed my transition to IPv6)
  72. Re:Viruses Aren't a Problem in Linux by JasterBobaMereel · · Score: 1

    ...all of which are owned by root and you (and any malware) have no access to be able to change ....

    This is why it is difficult to get it to survive a reboot

    There is no such thing as a "Desktop" system there is just a system tuned for the desktop with particular packages selected

    --
    Puteulanus fenestra mortis
  73. Re:Money? Damn! by plague3106 · · Score: 1

    I'm not sure MoneyDance will work for me; I have the H&B version of Money, and actually use it to create invoices and track business expenses. The only other option seems to be Quickbooks.. and I was happy to leave Quicken years ago..

  74. Re:Money? Damn! by darkpixel2k · · Score: 1

    I'm not sure MoneyDance will work for me; I have the H&B version of Money, and actually use it to create invoices and track business expenses. The only other option seems to be Quickbooks.. and I was happy to leave Quicken years ago..

    In that case, MoneyDance won't work for you. I've used MS Money H&B 2007, and it's lightyears past MoneyDance. I'm sure they'll get there eventually. Too bad it isn't open source...

    --
    There's no place like ::1 (I've completed my transition to IPv6)
  75. Re:Viruses Aren't a Problem in Linux by IntlHarvester · · Score: 1

    Your .bashrc file is owned by root?

    I suspect you are trying to be 'technical' here, but the upshot is that you're 100% wrong.

    --
    Business. Numbers. Money. People. Computer World.
  76. Re:Viruses Aren't a Problem in Linux by JasterBobaMereel · · Score: 1

    ... and the script will be running as you ... will all your lack of ability to do anything destructive (except to your data files)

    --
    Puteulanus fenestra mortis